Pakistanis angry over detentions in Times Sq. case Monday, May 24, 2010
ISLAMABAD – Relatives of three men detained by Pakistan for alleged links to the suspect in the attempted Times Square bombing say the men are innocent.
They
AFP - Thursday, August 6TAIPEI (AFP) - - Taiwan's Beijing-friendly government on Wednesday denied boycotting an Australian film festival amid a row over the e
BERLIN (Reuters) - Chancellor Angela Merkel suffered a double blow on Thursday as a senior party ally in east German
Minister seeks closure of anti-Berlusconi websites Wednesday, December 16, 2009
ROME (AFP) - – The Italian government moved Tuesday to close down Internet sites encouraging further violence against Prime Minister Silvio Berlusconi, who
By ELAINE KURTENBACH,AP Business Writer AP - Wednesday, March 18SHANGHAI - Asia's stock market rally seemed to be running out of steam Wednesday, despite an
Edition:
U.S.
Africa
Arabic
Argentina
Brazil
Canada
China
France
Germany
India
Italy
Japan
Latin America
Mexico
Russia
Spain
United Kingdom
Home
Business
Business Home
Economy
Technology
Media
Small Business
Legal
Deals
Earnings
Social Pulse
Business Video
The Freeland File
Markets
Markets Home
U.S. Markets
European Markets
Asian Markets
Global Market Data
Indices
M&A
Stocks
Bonds
Currencies
Commodities
Futures
Funds
peHUB
World
World Home
U.S.
Brazil
China
Euro Zone
Japan
Mexico
Russia
India Insight
World Video
Reuters Investigates
Decoder
Politics
Politics Home
Election 2012
Tales from the Trail
Political Punchlines
Supreme Court
Politics Video
Tech
Technology Home
MediaFile
Science
Tech Video
Tech Tonic
Social Pulse
Opinion
Opinion Home
Chrystia Freeland
John Lloyd
Felix Salmon
Jack Shafer
David Rohde
Bernd Debusmann
Nader Mousavizadeh
Lucy P. Marcus
David Cay Johnston
Bethany McLean
Edward Hadas
Hugo Dixon
Ian Bremmer
Lawrence Summers
Susan Glasser
The Great Debate
Steven Brill
Jack & Suzy Welch
Frederick Kempe
Christopher Papagianis
Breakingviews
Equities
Credit
Private Equity
M&A
Macro & Markets
Politics
Breakingviews Video
Money
Money Home
Tax Break
Lipper Awards 2012
Global Investing
MuniLand
Unstructured Finance
Linda Stern
Mark Miller
John Wasik
James Saft
Analyst Research
Alerts
Watchlist
Portfolio
Stock Screener
Fund Screener
Personal Finance Video
Money Clip
Investing 201
Life
Health
Sports
Arts
Faithworld
Business Traveler
Entertainment
Oddly Enough
Lifestyle Video
Pictures
Pictures Home
Reuters Photographers
Full Focus
Video
Reuters TV
Reuters News
Article
Comments (0)
Editor's Choice
3D tool offers view of the future for architects and urban planners
Urban planners and architects will soon be able to take a virtual tour of houses and neighborhoods to help them make important design and planning decisions. Video
Aging Microsoft lures young tech idealists
Video: An avocado a day to keep the doctor away
How much soda is bought with food stamps?
Follow Reuters
Facebook
Twitter
RSS
YouTube
Read
China ready to impound EU planes in CO2 dispute
10:37am EDT
Police raided wrong Alabama house searching for shooting suspect: FBI
10:17am EDT
Zynga shares plummet as Facebook game craze wanes
10:28am EDT
Apple takes on Google with own maps, better Siri
5:21am EDT
Apple takes on Google with own maps, better Siri
11 Jun 2012
Discussed
134
Wisconsin recall election too close to call after polls close
130
Exclusive: Drones ”inhumane”, dead al Qaeda man’s family says
109
Obama: U.S. economy ”not doing fine”, action needed
Watched
Syrian rebels seize military base
Mon, Jun 11 2012
The Summer from Hell 3: Revenge of the euro - Rough Cuts
Thu, Jun 7 2012
Australian court rules dingo did kill infant 32 years ago
Mon, Jun 11 2012
Some Flame code found in Stuxnet virus: experts
Tweet
Share this
Email
Print
Related News
Nations must talk to halt "cyber terrorism": Kaspersky
Wed, Jun 6 2012
Australian defense minister off-line in China to avoid cyber spying: media
Tue, Jun 5 2012
Flame virus prompts Microsoft to boost Windows security
Tue, Jun 5 2012
Flame exploits Windows bug to attack PCs
Mon, Jun 4 2012
Cyber-attacks "bought us time" on Iran: U.S. sources
Sat, Jun 2 2012
Analysis & Opinion
Counterparties: The slow-burn jobs crisis
Don’t forget Iran’s record of deception
Related Topics
Tech »
United Nations »
Eugene Kaspersky, Chairman and CEO of Kaspersky Labs, speaks at a Tel Aviv University cyber security conference June 6, 2012.
Credit: Reuters/Baz Ratner
By Jim Finkle and Joseph Menn
Tue Jun 12, 2012 5:04am EDT
(Reuters) - Two leading computer security firms have linked some of the software code in the powerful Flame virus to the Stuxnet cyber weapon, which was widely believed to have been used by the United States and Israel to attack Iran's nuclear program.
Eugene Kaspersky, chief executive of Moscow-based Kaspersky Lab, which uncovered Flame last month, said at the Reuters Global Media and Technology Summit on Monday his researchers have since found that part of the Flame program code is nearly identical to code found in a 2009 version of Stuxnet.
Later in the day, the largest security firm, Symantec Corp, said it had confirmed that some source code had been shared.
The new research could bolster the belief of many security experts that Stuxnet was part of a U.S.-led cyber program still active in the Middle East and perhaps other parts of the world.
Flame is the most complex computer spying program ever discovered and appeared to be aimed at government and energy-industry offices in Iran, Israel, the Palestinian territories and Sudan. It has the capacity to steal or alter electronic documents. Flame has 20 times as much code as Stuxnet and hijacked Microsoft's process for automatic updates in order to install itself.
Although neither Kaspersky nor Symantec said who they thought built Flame, news organizations, including Reuters and The New York Times, have reported the U.S. and Israel were behind Stuxnet -- which was uncovered in 2010 after it damaged centrifuges used to enrich uranium at a facility in Natanz, Iran.
Instead of issuing denials, authorities in Washington recently launched investigations into leaks about the highly classified project. The White House declined to comment.
On Stuxnet and Flame, "there were two different teams working in collaboration," Kaspersky told the Reuters Summit in London.
Flame is a highly sophisticated computer virus that disguises itself as common business software. It was deployed at least five years ago and can eavesdrop on conversations on the computers it infects and steal data.
Security experts have suspected links among Flame, Stuxnet and Duqu -- another piece of malicious software that was discovered last year -- but Kaspersky Lab was the first to say it found hard evidence.
Late on Monday, Symantec research manager Liam O Murchu agreed, using his company's name for the newest virus, Flamer. "Symantec Security Response confirms Flamer and Stuxnet share some of its source code," O Murchu wrote, adding that the analysis would continue.
If the United States is proven to be a force behind Flame, it would confirm the country that invented the Internet is involved in cyber espionage -- something for which it has criticized China, Russia and other nations.
A Pentagon report last year that outlined the still-evolving U.S. cyber strategy said economic espionage could prove the greatest threat to long-term U.S. interests, pointing to thefts of industrial and defense secrets via Internet spyware.
"There's a Balkanization of cyberspace that's occurring, and companies need to choose which side they're on," said Dmitri Alperovich, co-founder of U.S. security firm CrowdStrike.
SIMILAR TRAITS
Kaspersky Lab had said Flame was developed with a different set of tools than Stuxnet, though it said its analysis was just beginning and would take many months.
After digging deeper, Kaspersky Lab said Monday its researchers identified segments of Flame and a version of Stuxnet released in 2009 that were nearly identical -- suggesting the engineers who built the two viruses had access to the same set of source code.
That suggested tight collaboration between the teams behind the two viruses. Eugene Kaspersky said it was clear there were two or more teams with differing styles, and that Flame as a whole might have employed 100 people.
Researchers have been looking for a connection between Stuxnet and Flame because both viruses infected machines by taking advantage of a Windows flaw to launch the "autorun" feature, and infected personal computers from a small drive inserted via USB slot.
The section of code now cited as connecting the two pieces of malicious software not only concerns that flaw but does so in the same style.
The Windows flaw was unknown before Stuxnet's discovery in 2010, according to Roel Schouwenberg, one of the Kaspersky Lab researchers who helped discover the Flame virus.
Kaspersky Lab researchers did not find the Flame components in more advanced versions of Stuxnet, added Schouwenberg.
"Flame was used as some sort of a kick-starter to get the Stuxnet project going," Schouwenberg theorized. "As soon as the Stuxnet team had their code ready, they went their way."
He suspected the creators of Stuxnet removed the borrowed components from later versions so the Flame program would not be compromised if the attack on the Iranian nuclear program was discovered.
Stuxnet was discovered in 2010 and has been closely scrutinized by the world's smartest cyber sleuths. Yet Flame remained hidden until last month, when a United Nations agency asked Kaspersky Lab to look for a virus that Iran said had sabotaged its computers, deleting valuable data.
When Kaspersky's team started looking for suspicious files in the Middle East, they found Flame.
Eugene Kaspersky said at the Reuters Summit his firm recently agreed to advise on geopolitical Internet security issues more broadly for the U.N.'s International Telecommunication Union. Russia and others want the group to take a more active role in Internet governance.
Schouwenberg said he suspected Flame may be capable of deleting data and attacking industrial control systems that run plants like the uranium enrichment facility at Natanz, but he has yet to find the evidence.
Kaspersky Lab researchers are still trying to understand the function of more than 100 mysterious files built into the Flame samples that they have discovered, he said.
Follow Reuters Summits on Twitter @Reuters_Summits.
(Editing by Alden Bentley, Jeffrey Benkoe Steve Orlofsky)
Tech
United Nations
Related Quotes and News
Company
Price
Related News
Tweet this
Link this
Share this
Digg this
Email
Reprints
We welcome comments that advance the story through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters. For more information on our comment policy, see http://blogs.reuters.com/fulldisclosure/2010/09/27/toward-a-more-thoughtful-conversation-on-stories/
Comments (0)
Be the first to comment on reuters.com.
Add yours using the box above.
Edition:
U.S.
Africa
Arabic
Argentina
Brazil
Canada
China
France
Germany
India
Italy
Japan
Latin America
Mexico
Russia
Spain
United Kingdom
Back to top
Reuters.com
Business
Markets
World
Politics
Technology
Opinion
Money
Pictures
Videos
Site Index
Legal
Bankruptcy Law
California Legal
New York Legal
Securities Law
Support & Contact
Support
Corrections
Connect with Reuters
Twitter
Facebook
LinkedIn
RSS
Podcast
Newsletters
Mobile
About
Privacy Policy
Terms of Use
AdChoices
Copyright
Our Flagship financial information platform incorporating Reuters Insider
An ultra-low latency infrastructure for electronic trading and data distribution
A connected approach to governance, risk and compliance
Our next generation legal research platform
Our global tax workstation
Thomsonreuters.com
About Thomson Reuters
Investor Relations
Careers
Contact Us
Thomson Reuters is the world's largest international multimedia news agency, providing investing news, world news, business news, technology news, headline news, small business news, news alerts, personal finance, stock market, and mutual funds information available on Reuters.com, video, mobile, and interactive television platforms. Thomson Reuters journalists are subject to an Editorial Handbook which requires fair presentation and disclosure of relevant interests.
NYSE and AMEX quotes delayed by at least 20 minutes. Nasdaq delayed by at least 15 minutes. For a complete list of exchanges and delays, please click here.