[ISN] China Likely Behind Stuxnet Attack, Cyberwar Expert Says

From: InfoSec News <alerts_at_private>
Date: Wed, 15 Dec 2010 00:01:58 -0600 (CST)
http://www.darkreading.com/vulnerability-management/167901026/security/attacks-breaches/228800582/china-likely-behind-stuxnet-attack-cyberwar-expert-says.html

By Kelly Jackson Higgins
Darkreading 
Dec 14, 2010 

Israel and the U.S. so far have been pegged as the most likely 
masterminds behind the Stuxnet worm that targeted Iran's nuclear 
facility, but new research indicates China could instead be the culprit.

Jeffrey Carr, founder and CEO of Taia Global, an executive cybersecurity 
firm, and author of Inside Cyber Warfare, says he has found several 
clues that link China to Stuxnet. ā€¯Right now I'm very comfortable with 
the idea that this is an attack that emanated from China," Carr says. 
"I'm fairly certain this was China-driven."

Carr, who blogged about his new theory today, says Vacon, the maker of 
one of the two frequency converter drives used in the Siemens 
programmable logic controller targeted by the Stuxnet worm, doesn't make 
its drives in its home country Finland, but rather in Suzhou, China.

Chinese customs officials in March 2009 raided Vacon's Suzhou offices 
and took two employees into custody, allegedly due to some sort of 
"irregularities" with the time line of when experts think Stuxnet was 
first created, according to Carr. "Once China decided to pursue action 
against this company and detain two of its employees, they had access to 
everything -- this is where they manufacture the drives, so they would 
have easy access if they were looking for that material," such as 
engineering specifications, he says.

[...]


___________________________________________________________      
Tegatai Managed Colocation: Four Provider Blended
Tier-1 Bandwidth, Fortinet Universal Threat Management,
Natural Disaster Avoidance, Always-On Power Delivery 
Network, Cisco Switches, SAS 70 Type II Datacenter. 
Find peace of mind, Defend your Critical Infrastructure.
http://www.tegataiphoenix.com/
Received on Tue Dec 14 2010 - 22:01:58 PST

This archive was generated by hypermail 2.2.0 : Tue Dec 14 2010 - 22:13:06 PST