Information Security News mailing list archives
Duqu, Stuxnet link unclear
From: InfoSec News <alerts () infosecnews org>
Date: Thu, 27 Oct 2011 00:48:22 -0500 (CDT)
http://www.computerworld.com/s/article/9221234/Duqu_Stuxnet_link_unclear By Jaikumar Vijayan Computerworld October 26, 2011A report by Dell SecureWorks on Wednesday debunked the idea that the newly discovered Duqu Trojan is related to last year's Stuxnet worm or was created by the same authors.
According to SecureWorks, there are some similarities in code and function between Duqu and Stuxnet, but there's little conclusive proof the two are linked. "Supporting evidence is circumstantial at best and insufficient to confirm a direct relationship," SecureWorks said.
The Duqu Trojan was discovered earlier this month by a little-known Hungarian lab called the Laboratory of Cryptography and System Security. In a report last week, Symantec called the Trojan a precursor to the next Stuxnet and said that Duqu shared a lot of its source code with Stuxnet and was likely created by the same authors.
Unlike Stuxnet, Duqu is not directly targeted at industrial control systems, Symantec noted. Its main purpose is to let attackers steal data from manufacturers of industrial control systems that can then be used to craft attacks against entities using such systems.
[...] _____________________________________________________ Subscribe to InfoSec News - www.infosecnews.org http://www.infosecnews.org/mailman/listinfo/isn
Current thread:
- Duqu, Stuxnet link unclear InfoSec News (Oct 26)