The Mother Virus Has Arrived: Is Blackenergy malware the future of cyberwarfare? - by Aaron Ernst

Five years ago, the most sophisticated cyber weapon the world had ever seen ravaged Iran's nuclear program. Allegedly developed by the U.S. and Israel, the complex virus infected the computer system that ran the centrifuges.

 Slight tweaks to the software caused hundreds of the centrifuges to self-destruct, setting the program back years. The malware was dubbed Stuxnet.

Traditionally, foreign governments have used malware to spy and steal. But this was something entirely different.

“Stuxnet, it is a weapon, it’s not 'like' a weapon,” says German computer security expert Ralph Langner, who was the first to identify how the virus worked. “It is a weapon because it was designed to cause physical damage.”

Now, Langner worries that Stuxnet could come back to haunt the U.S. Those same vulnerabilities in Iran's nuclear control systems that the malware exploited can be found in similar systems throughout America.

“These components are used in chemical plants, nuclear power plants, everywhere," Langner said. “We open Pandora's box without any idea, any clue, how we would deal with that when somebody turns that around.

And that turnaround is only a question of time.”

But there are signs the threat that Langner has feared may have already arrived.

Malicious code could theoretically be used to manipulate the controls of pipelines, water purification systems, power generators and other critical infrastructure, resulting in real-world physical damage. That could mean blackouts or disruptions to an entire city's water supply. In short, it could be catastrophic.

Read more: Is Blackenergy malware the future of cyberwarfare? | Al Jazeera America

Iran: Cyber Virus Stuxnet scored quick hit on first target, says researcher

On Friday, Symantec published new information on Stuxnet, the worm that most suspect was aimed at Iran's nuclear program, including the uranium enrichment centrifuges at its underground Natanz facility.

In its newest Stuxnet analysis, Symantec said that 10 original infections in three waves over an 11-month period had targeted five domains linked to organizations within Iran. Symantec has declined to name the organizations, saying only that all five were involved in industrial processing.

As the worm spread, those 10 infected PCs later hijacked about 12,000 Iranian computers.

For more: Stuxnet scored quick hit on first target, says researcher - Computerworld