Stuxnet
A highly sophisticated cyber weapon discovered in 2010, specifically designed to target industrial control systems. Stuxnet successfully disrupted centrifuges at Iranian nuclear facilities and is widely regarded as the first publicly known instance of a nation-state cyberattack tool deployed against critical infrastructure.
Timeline (last 90 days)
In 2010, the Stuxnet virus destroyed centrifuges at Iran's nuclear facilities by tampering with the control logic of S7 PLCs.
Stuxnet is a worm virus discovered in 2010 that specifically targeted industrial control systems at Iran's nuclear facilities.
Stuxnet successfully disrupted the normal operation of approximately 1,000 uranium-enrichment centrifuges.
Stuxnet's attack targets were the OB program blocks in Siemens S7-315 and S7-417 PLCs, periodically pushing centrifuge speeds up to 1,410 Hz or down to 2 Hz from 1,064 Hz.
Stuxnet successfully breached the protective boundary of air-gapped networks via removable media such as USB drives, demonstrating flaws in physical isolation strategies.
Stuxnet infected more than 100,000 machines worldwide, with approximately 60% located in Iran.
Duqu (2011) is believed to share part of its code framework with Stuxnet and focused on intelligence gathering rather than sabotage.
Stuxnet exploited four Windows zero-day vulnerabilities simultaneously, including the LNK shortcut vulnerability (CVE-2010-2568) and a printer spooler vulnerability.
Stuxnet used legitimate digital certificates stolen from Taiwanese companies Realtek and JMicron to bypass Windows driver signature verification.
Stuxnet targeted OB program blocks running in Siemens S7-315 and S7-417 PLCs, intercepting communication between Step 7 and the PLCs to inject malicious STL code while hijacking data readbacks to return preset normal values.
3 more timeline events
All Facts (13)
Stuxnet is a worm virus discovered in 2010 that specifically targeted industrial control systems at Iran's nuclear facilities.
70%UnverifiedIn 2010, the Stuxnet virus destroyed centrifuges at Iran's nuclear facilities by tampering with the control logic of S7 PLCs.
50%UnverifiedStuxnet successfully disrupted the normal operation of approximately 1,000 uranium-enrichment centrifuges.
50%UnverifiedStuxnet's attack targets were the OB program blocks in Siemens S7-315 and S7-417 PLCs, periodically pushing centrifuge speeds up to 1,410 Hz or down to 2 Hz from 1,064 Hz.
50%UnverifiedStuxnet successfully breached the protective boundary of air-gapped networks via removable media such as USB drives, demonstrating flaws in physical isolation strategies.
50%UnverifiedStuxnet infected more than 100,000 machines worldwide, with approximately 60% located in Iran.
50%UnverifiedDuqu (2011) is believed to share part of its code framework with Stuxnet and focused on intelligence gathering rather than sabotage.
50%UnverifiedStuxnet exploited four Windows zero-day vulnerabilities simultaneously, including the LNK shortcut vulnerability (CVE-2010-2568) and a printer spooler vulnerability.
50%UnverifiedStuxnet used legitimate digital certificates stolen from Taiwanese companies Realtek and JMicron to bypass Windows driver signature verification.
50%UnverifiedStuxnet targeted OB program blocks running in Siemens S7-315 and S7-417 PLCs, intercepting communication between Step 7 and the PLCs to inject malicious STL code while hijacking data readbacks to return preset normal values.
50%UnverifiedStuxnet breached the defenses of air-gapped networks via removable media such as USB drives, with estimated global infections exceeding 100,000 computers.
50%UnverifiedStuxnet contained a built-in infection counter that limited propagation to a maximum of three hops to control its spread.
50%Unverified2010年的Stuxnet蠕虫通过操控西门子S7-300系列PLC改变离心机转速攻击伊朗核设施
50%