TweakTown
Tech content trusted by users in North America and around the world
6,139 Reviews & Articles | 39,455 News Posts
Weekly Giveaway: Win an Antec Case, PSU and Cooler (Global Entry!)

Iran is the target of the U.S. and Israel-made Flame virus, according to sources

Flame, a virus like Stuxnet, targetting Iranian oil refineries, made by the U.S. and Israel

| Hacking & Security News | Posted: Jun 21, 2012 10:24 am

Flame, a highly sophisticated virus that was first discovered in Iranian oil refineries, and is supposedly the result of a U.S. and Israel joint effort to slow down Iran's nuclear program, reports The Washington Post. The information comes from multiple Western officials who purportedly have knowledge of the project, but of course want to remain anonymous.

 

TweakTown image news/2/4/24636_01_iran_is_the_target_of_the_u_s_and_israel_made_flame_virus_according_to_sources.jpg

 

This shouldn't come as a surprise considering the U.S. were unveiled as using the volatile Stuxnet virus, where The New York Times reported about Operation: Olympic Games, which is a project that used Stuxnet and Duqu, both sophisticated viruses. These viruses targeted Iranian SCADA systems, that allowed the creators of this virus to gather intelligence and even control aspects of Iran's nuclear and oil refining facilities.

 

Stuxnet code has been found within the Flame virus, according to security researchers, which is an unofficial confirmation that the creators of the Stuxnet virus (the U.S. government) are also behind this new nasty virus. Once this was discovered, in Get Smart fashion, the virus began to self-destruct, hastily removing itself from infected computers... not suss, huh?

 

Flame is quite capable, measuring in at 20MB, it carried a payload that could be transmitted through spoofing Windows updates, allowing it to infect even non-compromised systems on the same network. Where it gets dirty, is the fact that the creators of Flame used what is believed to be an unknown MD5 collision attack to forge Microsoft's digital signature on a fraudulent certificate, this in itself is an achievement which was described by security researchers as the 'holy grail of malware writers'.

 

Flame goes a step further, where it's capable of utilizing microphones and web cameras, logs keystrokes, collects screen shots, and allows it to propagate via removable like USB flash drives, and more, allowing it to be introduced into sensitive networks that are isolated from the public. Flame is even capable of using Bluetooth to send commands to other computers, allowing it to have many options of infecting, monitoring and controlling nearby workstations.

 

I always thought that would be an act of war? If the U.S. were behind such an attack (be it cyber, or not) then if the shoe was on the other foot and Iran were cyber-attacking U.S.-based nuclear facilities, I'm pretty sure that would be an entirely different story, with an entirely different outcome.

NEWS SOURCES:Techspot.com

Related Tags

Further Reading: Read and find more Hacking & Security news at our Hacking & Security news index page.

Do you get our news RSS feed? Get It!

Got an opinion on this news? Post a comment below!

Latest Tech News Posts

View More News Posts

Forum Activity

View More Forum Posts

Press Releases

View More Press Releases