This is a documentary that involves the US, Israel and Iran. It is about a malicious sophisticated software code called Stuxnet which is a computer worm. A worm, unlike a computer virus which like its named biological equivalent, since a virus requires a cell host to replicate itself. But the computer worm can self replicate and activate itself. The code was well written, with no bugs and it has a zero-day exploit. Which means it could infect the computer immediately, as day zero is an undisclosed computer-software vulnerability that hackers can exploit to adversely affect computer programs, data, additional computers or a network. It is known as a "zero-day" because a virus or worm usually reported or announced before becoming active, but this is activated immediately.
In Stuxnet, there were several zero days. Those with experience in looking at the code security as the professionals they came to the conclusion that it looks like a code written by a nation-state professionally and not by hackers. This looked like clean and clear cut professional. While looking at the code they noticed that it was attacking a specific part of Siemens hardware - it's PLC (Programmable Logic Controllers) which is used in controlling and setting valves, pumps etc. Hence it will check whether it was being used for certain things and when it passed all the checks it will deplore itself. The researchers discovered that the area it was being used or the virus was being activated was mainly in Iran as if they were targeting their nuclear facilities. Also, they noticed that their Iranian Nuclear scientists were being killed or bombed. Then they noticed that almost all of their nuclear pipes were exploding and systems were shutting down all of a sudden.
The documentary went into detail explaining the problems with the world security forces, the NSA, CIA, US Cyber Command, GCHQ, because of the awareness of critical infrastructure is in Cyber Space, organisations are now aware of the threats. The US had covertly been developing something and it was reported to have put resources to its development. It seems they developed something to deal with the threat of the Iranians but it seems Israeli's Unit 8200 got their hands on it. What was originally to be used for just monitoring and reporting, "they" modified it and made it more aggressive. Hence it specifically targeted the Iranian centrifuges resetting their internal configuration subsequently causing them to blow up, without leaving a trace. As a result, the Iranian government was losing trust in their own scientist and sacking them. The Israeli had produced a more aggressive version which was just shutting down computers. The end result was great for the Israeli, as it causes slowing down of the Iran Uranium Enrichment Program and forcing them to the negotiation table. When the Iranians found out what was being done, they renewed their nuclear activity. Also after seeing the attack of their nuclear scientists, it acted as a recruitment drive for their cyber army, which is one of the best in the world. They replaced the infected centrifuges and increased the amount of Uranium produced. Unfortunately, when this was released it spread on the internet and infecting worldwide computers.
The Department of Homeland Security thought that it was a direct attack on the US by an external agent as nobody had informed the Department that the US government had a hand in its creation and deployment. The Snowden leak revealed the extent of US and Israeli involvement in Stuxnet. The systems are connected and integrated in a way that makes them very vulnerable to attack. Iran cyber army attacked Saudi Aramco, the biggest oil company in the world and attacked 30,000 computer devices wiping off all the software off these devices. Then they attacked the US banks and their financial networks. Iran was sending US and Israel a message, that we could affect your systems as well, and because most US critical infrastructure is computer-based they are at most at risk. These were the unintended consequences of the Stuxnet attack. But they have to control these attacks, but it seems from the report Stuxnet was just a backchannel for Nitro Zeus and it does have something worst which will cripple all of Iran's infrastructure, from computers, water treatment plants, sewage treatment plants, electric grid, banks, hospitals, etc. They had to reach an agreement on the Nuclear Deal as other surrounding countries did feel threatened.
Later they had agreed on the Nuclear Iran Deal pertaining to the enrichment of Uranium and the reduction of the centrifuges. It seems the sanctions and diplomacy worked and the world seemed safer.
Until Trump got rid of the Deal...
Comments
Post a Comment