Security researchers seem to agree: a new computer virus, Duqu, appears to be closely related to the Stuxnet worm that allegedly infected industrial SCADA systems and ravaged Iran’s nuclear program last year. This one’s probably not going to make uranium centrifuges wobble, though, because it’s apparently just a spy. Duqu reportedly gives its controller a backdoor into infected systems, allowing them to obtain sensitive data and remotely download other malicious applications (including an infostealer that hides data in images of galaxies colliding), then deletes itself 36 days later. Why all the hubbub about Stuxnet, then? Security firms believe that Duqu and Stuxnet are close enough that they may be based on the exact same source code, and since that code was never obtained in Stuxnet’s heyday, the two viruses could have been crafted by the same organization. At any rate, there’s probably no need to worry about widespread Duqu disaster quite yet; since its discovery in Hungary earlier this week, precious few infections have been detected. Read the latest Duqu research at our source links.
‘Duqu’ computer trojan spy may be based on Stuxnet
is a senior editor and founding member of The Verge who covers gadgets, games, and toys. He spent 15 years editing the likes of CNET, Gizmodo, and Engadget.
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
