HomeCommunitySecurity Blog

Security Blog

 

Threat Lab Report - Stuxnet Worm

Posted By Netgear Threat Lab at 12:32 PM, September 28, 2010

Stuxnet began in July earlier this year and rapidly gained popularity because it is the first known malware specifically designed for an SCADA system and also for the theft of the digital certificates of some hardware companies. These in addition to reports that Stuxnet is targeting an Iranian nuclear power plant has created quite a stir.

Earlier variations of Stuxnet used a forged autorun.inf file in mobile USB hard disks to spread. Later on it also spread by exploiting the Microsoft Windows Shortcut 'LNK' Files Automatic File Execution Vulnerability (again, this is primarily through mobile USB hard disks). More recently, it has added another method of transmission by using a loophole in the Microsoft Print Spooler service. (This vulnerability has been patched by on Sept. 15th).

Posted by: Netgear Threat Lab at 12:32 PM
Categories: Netgear Threat Lab

No TrackBacks

TrackBack URL: http://prosecure.netgear.com/cgi-bin/mt/mt-tb.cgi/107

Comments