Kaspersky Experts Find Connection Between Flame and Stuxnet

A place to talk about relax topics, such as tailwaggers and jokes unrelated to our products, politics and religion. Please keep it clean.

Kaspersky Experts Find Connection Between Flame and Stuxnet

Postby vita » 2012-06-12 3:07

If up until now security researchers haven’t been able to find any direct connection between the new Flame and Stuxnet, further analysis has demonstrated that they’re very much related to each other, or at least they have been at some point in time.

Initially, experts didn’t consider the two pieces of malware related because Stuxnet (and Duqu) were created based on the Tilded platform, while Flame was not.

However, as it turns out, a particular component from Flame was used by Stuxnet to infect Iranian computers back in 2009.

Kaspersky researchers reveal that Flame was developed no later than the summer of 2008, while Stuxnet only emerged in the first half of the next year.

They assume that two independent teams have been building their own malware since 2007-2008, but in 2009 the creators of Stuxnet borrowed a little something from Flame called “resource 207.”

Resource 207 was a component that allowed Stuxnet to spread to USB drives via the infamous autorun.inf file. It also allowed it to exploit a zero-day in win32k.sys to escalate its privileges.

Further analysis has shown that “resource 207” is actually an encrypted DLL that contains a portable executable file which is actually a Flame plugin.

Read more: http://news.softpedia.com/news/Kaspersk ... 4905.shtml
User avatar
Advanced Member

Advanced Member
Posts: 155
Joined: 2012-02-01 3:06

Re: Kaspersky Experts Find Connection Between Flame and Stux

Postby uzzlber » 2012-06-12 4:22

Hope they can work out for a solution to kill the virus soon.

Posts: 44
Joined: 2012-06-04 1:48

Re: Kaspersky Experts Find Connection Between Flame and Stuxnet

Postby Bamainfotech » 2012-11-03 6:56

I don't find it ever works low. It seems good working and better than other Antiviruses.

Posts: 6
Joined: 2012-09-29 5:22

Return to General Chat

Random Threads
ThreadThread StarterViews
Tiffany & Co Outlet Octopus Gold Link Lås Armband [844a] - SEK 651 : Professionell Tiffany outlet-butiker, tiffanycos.cnreckleromarh0
3g blockertrinadoro20160
An Opinionated Preview from the 2014 SGIA ExpoMichaelaberm0
Réplicas de relojes Longinesreckleromarh0
Longines Replica Watches - Großhandel Longines Uhren Online-Shopcrknetschwilbu0

Who is online

Users browsing this forum: No registered users