Technology - Main

More malware targeting Iran could yet be discovered

19 Sep 2012 - {{hitsCtrl.values.hits}}

Fresh analysis of the malware Flame suggests it could be part of a much wider "family".

Flame is believed to have targeted sensitive data in Iran. It has already been linked to Stuxnet, which was aimed at Iran's nuclear infrastructure.

Analysis of the server controlling the malware suggests three similar pieces of code are as yet undiscovered.

The study also suggests Flame dates back to 2006, much earlier than previously thought.

Discovered in May, Flame has already been linked to Stuxnet, a worm that attacked Iran's nuclear infrastructure, and Duqu, a data-stealing worm that also infected some of Iran's computer systems.

The new report is a joint study from security firms Symantec, Kasperksy, the Crypto Labs in Budapest and the UN's International Telecommunications Union.

They were given access to the command and control servers of Flame.

Spelling mistake

It revealed the servers were using four communications protocols, only one of which was being used by Flame.

"I can't imagine that the other three were not being used. The conclusion seems to be that there is something else out there," said Prof Alan Woodward, a visiting professor at the University of Surrey's department of computing.

Flame has been described as one of the most complex computer threats ever discovered, but the study suggests attempts to destroy all evidence of it went wrong because of a spelling mistake.

"One might imagine that this type of code had a 'kill' button but in fact they had to program it," said Prof Woodward,

"Those behind it did try and destroy it. They may have known that they were about to be rumbled, but they failed at the last minute by mistyping the name of the file," he added.

Many believe the complexity of Flame and the other pieces of related malware points to state-sponsorship, but Prof Woodward said the latest analysis showed little involvement from intelligence agents.

"They don't start from the perspective of what can I look for. It appears to be written by computer analysts not intelligence analysts," he said.

(Source : BBC)

Technology - Main

More malware targeting Iran could yet be discovered

Most Popular Articles

People have complete right to lie: Kottahachchi

Hybrid vehicle import tax based on engine capacity will reduce costs, satisfy all

Sri Lankan jailed for murdering wife with axe in front of their children

Namal responds to allegations of preferential treatment in law exam

IMF agrees to raise income tax threshold: President

RW praises AKD

LATES'T NEWS

SLPP decides on legal action over reducing MR’s security

18-hour water cut in Western Province starting tomorrow

NMRA, SPC, SPMC, MSD must take responsibility of continuous supply of quality medicines: Minister

STF to be deployed to control power cable thefts during night

Revenue officer among two arrested for seeking chicken kilo as bribe