Slashdot Mirror
There's a Stuxnet Copycat, and We Have No Idea Where It Came From (vice.com)
Joseph Cox, reporting for Motherboard: After details emerged of Stuxnet, arguably the world's first digital weapon, there were concerns that other hackers would copy its techniques. Now, researchers have disclosed a piece of industrial control systems (ICS) malware inspired heavily by Stuxnet. Although the copycat malware -- dubbed IRONGATE by cybersecurity company FireEye -- only works in a simulated environment it, like Stuxnet, replaces certain types of files, and was seemingly written to target a specific control system configuration. [...] IRONGATE works within a simulated Siemens environment called PLCSIM, used for testing programs before they are pushed out into the field. Like Stuxnet, IRONGATE replaces a Dynamic Link Library (DLL), a small collection of code that can be used by different programs at the same time, with a malicious one of its own. IRONGATE's DLL records five seconds of traffic from the Siemens' system to the user interface, and replays it over again, potentially tricking whoever is monitoring the system into thinking everything is fine, while the malware might manipulate something else in the background.Dark Reading's coverage on this is also worth a read.
Please read this thread.
https://twitter.com/da_667/status/738463931988094976
gathers GAY NIG.GERS from all over America and abroad for one common goal - being GAY NIG.GERS.
Are you GAY ?
Are you a NIG.GER ?
Are you a GAY NIG.GER ?
If you answered "Yes" to any of the above questions, then G_N_A_A (GAY NIG.GER ASSOCIATION OF AMERICA) might be exactly what you've been looking for!
Join G_N_A_A (GAY NIG.GER ASSOCIATION OF AMERICA) today, and enjoy all the benefits of being a full-time G_N_A_A member.
G_N_A_A (GAY NIG.GER ASSOCIATION OF AMERICA) is the fastest-growing GAY NIG.GER community with THOUSANDS of members all over United States of America. You, too, can be a part of G_N_A_A if you join today!
Why not? It's quick and easy - only 3 simple steps!
First, you have to obtain a copy of GAY NIG.GERS FROM OUTER SPACE THE MOVIE and watch it.
You can watch GAY NIG.GERS FROM OUTER SPACE on Youtube.
Second, you need to succeed in posting a G_N_A_A "first post" on slashdot.org , a popular "news for trolls" website
Third, you need to join the official G_N_A_A irc channel #G_N_A_A on EFNet, and apply for membership.
Talk to one of the ops or any of the other members in the channel to sign up today!
If you are having trouble locating #G_N_A_A, the official GAY NIG.GER ASSOCIATION OF AMERICA irc channel, you might be on a wrong irc network. The correct network is EFNet, and you can connect to irc.secsup.org or irc.easynews.com as one of the EFNet servers.
If you do not have an IRC client handy, you are free to use the G_N_A_A Java IRC client by clicking here.
If you have mod points and would like to support G_N_A_A, please moderate this post up.
This post brought to you by Penisbird , a proud member of the G_N_A_A
G_____________________________________naann_______ ________G
N_____________________________nnnaa__nanaaa_______ ________A
A____________________aanana__nannaa_nna_an________ ________Y
A_____________annna_nnnnnan_aan_aa__na__aa________ ________*
G____________nnaana_nnn__nn_aa__nn__na_anaann_MERI CA______N
N___________ana__nn_an___an_aa_anaaannnanaa_______ ________I
A___________aa__ana_nn___nn_nnnnaa___ana__________ ________G
A__________nna__an__na___nn__nnn___SSOCIATION_of__ ________G
G__________ana_naa__an___nnn______________________ ________E
N__________ananan___nn___aan_IGGER________________ ________R
A__________nnna____naa____________________________ ________S
A________nnaa_____anan____________________________ ________*
G________anaannana________________________________ ________A
N________ananaannn_AY_____________________________ ________S
A________ana____nn_________IRC-EFNET-#G_N_A_A________ ________S
A_______nn_____na_________________________________ ________O
*_______aaaan_____________________________________ ________C
Gary Niger gary_niger@G_N_A_A.us G_N_A_A Corporate Headquarters 143 Rolloffle Avenue Tarzana, California 91356
Enid Al-Punjabi enid_al_punjabi@G_N_A_A.us G_N_A_A World Headquarters No.33 Kyutei Bld. 2F, Shinjuku 2-11-7, Shinjuku-ku, Tokyo, Japan ????????2??11-6
Copyright (c) 2003-2015 Gay NIG.GER Association of America
Ich Bindawalross (London) - G_N_A_A (NYSE: G_N_A_A) Presiden
How dare they try to thwart peaceful progress with nuclear energy for our Muslim neighbors in the developing world.
Do you want to get Skynet? Because that's how you get Skynet.
Stack Overflow?
It came from Israel. Why feign ignorance?
Ok now that is pretty advanced. How exactly is a anti-virus app supposed to detect and remove that in real time? Daym!
L85E
Yes, that's a $20,000+ PLC there, boys
I am pretty sure that there are more advanced/complicated/effective ways to test to see if you are running in a VM but you could always recreate the particular folders and registry keys looked for to appear that your main OS is running within a virtual machine. This would, at a minimum, stop the simpler malware that attempts to block analysis...
Presumably this 'digital weapon' only runs on Microsoft Windows ©
I got to "Stuxnet, arguably the world's first digital weapon" and hit the limit for stupid in the first sentence. No need to read further.
I could also argue that dirt is water, and it'd be just as ridiculous.
How about Buckshot Yankee in 2005, using a modified version of agent.btz that combined compromise with persistence, worm, and staging tool?
How about the automation portion of Titan Rain in 2003, that combined seeking, filtering, persisting, gathering, and moving on?
Or maybe the 2007 Sinowal/Torpig/Mebroot variants that were pretty much fully autonomous self-updating weapons once launched -- do weapons against commercial entities not count as much as weapons from or toward nation-states?
Does none of that count? Stuxnet had more self-contained payload tuned for the target environment, but less self-updating/persistence and other capabilities. So what the hell kind of n00b idiocy is "world's first digital weapon"?
FFS, if you don't know the first thing about history, please don't try to pontificate on the topic.
I think not...(*poof*)
I think I had read that, decades ago, Israel university student projects included writing a virus. Maybe this is just newer coursework?
People probably say these things because Stuxnet was the first worm to successfuly destroy a nuclear centrifuge plant.
Surely Stuxnet mostly just copied the behavior of very early digital viruses (Which copied themselves from computer to computer via floppy disk)
Build a Man a Fire, and He'll Be Warm for a Day. Set a Man on Fire, and He'll Be Warm for the Rest of His Life.