Iran General NewsMystery virus sought 'designs from Iran'

Mystery virus sought ‘designs from Iran’

-

AFP: A mystery computer virus discovered last month and deployed in a massive cyberattack chiefly against Iran sought to steal designs and PDF files from its victims, a Russian firm said.
MOSCOW (AFP) — A mystery computer virus discovered last month and deployed in a massive cyberattack chiefly against Iran sought to steal designs and PDF files from its victims, a Russian firm said.

Kaspersky Lab, one of the world’s biggest producers of anti-virus software, announced last month the discovery of the Flame virus, which it described as the biggest and most sophisticated malware ever seen.

In the latest update on Kaspersky’s analysis of the virus, released late Monday, the firm’s chief security expert, Alexander Gostev, said the malware’s creators had focussed on file formats such as PDF and AutoCAD, a software for computer design and drawing.

“The attackers seem to have a high interest in AutoCAD drawings,” Gostev said in a statement.

The malware also “goes through PDF and text files and other documents and makes short text summaries,” he added.

“It also hunts for e-mails and many different kinds of other ‘interesting’ (high-value) files that are specified in the malware configuration.”

He confirmed that Iran was by far the biggest target with a count of 185 infections, followed by 95 in Israel and the Palestinian Territories, 32 in Sudan and 29 in Syria.

The discovery of Flame immediately sparked speculation that it had been created by US and Israeli security services to steal information about Iran’s controversial nuclear drive.

Intriguingly, Kaspersky said that hours after the existence of the virus was first announced on May 28, “The Flame command-and-control infrastructure, which had been operating for years, went dark.”

It gave no further information over the possible perpetrators of the mystery attack, though it identified about 80 domains that appear to belong to the Flame infrastructure, in locations from Hong Kong to Switzerland.

Kaspersky said it had used a procedure known as sinkholing — which allows Internet security experts to gain control of a malicious server — to analyse the operation.

During the sinkholing it found that on three computers in Lebanon, Iraq and Iran the Flame versions changed, suggesting Flame upgraded itself in the process.

The New York Times reported last week that President Barack Obama has accelerated cyberattacks on Iran’s nuclear programme in an operation codenamed “Olympic Games” that uses a malicious code developed with Israel.

Latest news

 Statistics show that New Year accidents’ deaths in Iran reached 585

Ahmad Shirani, the head of the Information and Traffic Control Center of the Iranian regime’s police, announced that the...

Land Subsidence in Critical Conditions in Isfahan

Mehdi Toghyani, a member of the Iranian regime’s Majlis (parliament), pointed to the occurrence of land subsidence in various...

Iran’s Actual Inflation Rate Higher Than Official Stats

The state-run Donya-e-eqtesad newspaper, in a report analyzing the "general sentiment" regarding inflation in 2023, has stated that households...

Iranian Workers’ Monthly $136 Wages Can’t Cover $500 Expenses

The lives of a significant portion of the Iranian population are marked by uncertainty, largely because the Iranian economy...

Iranian Nurses Earn Twice Their Wages in Ride-Hailing Services

Reza Aryanpour, a member of the regime’s Majlis (parliament) Health and Treatment Commission, highlighted the growing trend of nurses...

Iran: Unprecedented Record of 152 Million Liters of Gasoline Consumption Per Day

On March 19, Iran set a new historical record in gasoline consumption with 152 million liters consumed in one...

Must read

Iran tells Schroeder ‘impossible’ to stop nuclear plan

AFP: Iran's parliamentary speaker Ali Larijani on Saturday told...

House OKs tighter sanctions against Iran’s nuclear aims

Washington Times: The House yesterday overwhelmingly passed a bipartisan...

You might also likeRELATED
Recommended to you