How does Stuxnet work?

STUXNET had an attack strategy

Infection

The infection of Stuxnet is believed to have started when someone unknowingly plugged in an infected removable memory stick (flash drive) into their computer.
From there, the worm could install itself on other machines on the same network while still be undetected.

Search

Once installed on a computer, Stuxnet would search for certain criteria and ensure that these have been met before it would attack the machine. These criteria include:

Update

Stuxnet will check to see if the computer is a target
If it is a target, it will attempt to connect to the internet and try to update itself

Compromise

Stuxnet will then compromise the system
It will exploit vulnerabilities that haven't been identified yet

Control

Stuxnet will figure out what the computer is used for
It will then use this information to take over the hardware, causing failures.

Destroy

As it destroys what the computer is controlling, it will send false messages saying everything is okay until it is too late.

Google Sites

Report abuse