Bonum Certa Men Certa

Windows Users Still Under Attack From Stuxnet, Halo, and Zeus

Would you trust Microsoft Windows in nuclear programmes?

Nuclear artillery
GRABLE EVENT - Part of Operation Upshot-Knothole, was a 15-kiloton test fired from a 280-mm cannon on May 25, 1953 at the Nevada Proving Grounds. Frenchman's Flat, Nevada - Atomic Cannon TestHistory's first atomic artillery shell fired from the Army's new 280-mm artillery gun. Hundreds of high ranking Armed Forces officers and members of Congress are present. The fireball ascending. (source: Wikipedia)



Summary: Stuxnet -- perhaps best known for its effects on Microsoft Windows-dependent nuclear programmes -- is now a Chinese concern as well; Windows users are still under heavy artillery from malware

ALL WE have been saying about Stuxnet so far can be found in the following posts (this epidemic is still out of control):

  1. Ralph Langner Says Windows Malware Possibly Designed to Derail Iran's Nuclear Programme
  2. Windows Viruses Can be Politically Motivated Sometimes
  3. Who Needs Windows Back Doors When It's So Insecure?
  4. Windows Insecurity Becomes a Political Issue
  5. Windows, Stuxnet, and Public Stoning
  6. 1
  7. Has BP Already Abandoned Windows?
  8. Reports: Apple to Charge for (Security) Updates
  9. Windows Viruses Can be Politically Motivated Sometimes
  10. New Flaw in Windows Facilitates More DDOS Attacks
  11. Siemens is Bad for Industry, Partly Due to Microsoft
  12. 4
  13. Microsoft's Negligence in Patching (Worst Amongst All Companies) to Blame for Stuxnet
  14. Microsoft Software: a Darwin Test for Incompetence
  15. Bad September for Microsoft Security, Symantec Buyout Rumours
  16. Microsoft Claims Credit for Failing in Security
  17. Many Windows Servers Being Abandoned; Minnesota Goes the Opposite Direction by Giving Microsoft Its Data


The risk of accidental nuclear exchanges is said to be on par with if not greater than that of a man-triggered nuclear war. In the Cuban Missile Crisis, a Soviet submarine was just seconds away from launching nuclear missiles into US targets (the report was unsealed only decades later) and just over a decade ago antiquated Russian equipment almost fired automatically at false alarms of nuclear war (it was manually prevented before an accidental nuclear war could be started). The danger of Microsoft Windows in such sensitive operations ought to become apparent. Other than man-made global warming/peak oil/famine, the greatest threat to human survival is said to be those 50,000+ nuclear warheads which are kept under control by one operating system or another.

"Iran arrests Stuxnet 'nuclear spies'," reports IDG.

Iran says it has detained a number of 'nuclear spies' in connection with the Stuxnet malware attacks on its nuclear programme computer systems last week.

Who has been arrested and on what evidence has not yet been explained, but the country's Intelligence Minister, Heidar Moslehi, adopted a triumphant tone in reported comments made to the Iranian Mehr News agency and domestic TV sources.


The fear finally spreads to China, which is another country the West loves to fear. "Nationwide holiday ups China's risk to Stuxnet," says this new headline.

Computer hackers have warned that the week-long National Day holiday in China that began Friday could leave the country vulnerable to further attacks from Stuxnet, according to a report by news agency AFP.


It turns out that Stuxnet has been out there for quite some time:

Sophisticated stuxnet malware is approaching 18 months old



[...]

The report reveals that Stuxnet is a complex piece of code that generates no less than 32 payload exports and can spread in multiple environments, including in local area networks using a vulnerability in the Windows print spooler, as well as tapping Windows Server to hit smaller enterprises.


When it's estimated that one in two Windows PCs is a zombie PC and reporters still fail to call out Windows, how will anyone ever wisen up? Even a Microsoft console game, Halo [1, 2], has become a vector for infecting Windows based on this news:

Gamers looking to get the Recon Armor in the latest iteration of the Halo franchise (Halo: Reach) should think twice about using “alternative” methods.

Microsoft is warning fans of the game to steer clear of some code generators which promise to deliver the rare armor, but instead infect their computers with malware.


The Windows-only Zeus, which we wrote about in [1, 2, 3, 4, 5], is targeting Linkedin users who are running Windows at the moment:

Nevertheless, if anyone is affected with the spam mail, Cisco recommends that that person should reset his passwords since the Zeus Trojan attack seizes login credentials and passwords.


Why go through all this complexity/trouble? If my parents use GNU/Linux on the desktop, everyone can too. It's not that hard (in certain ways it's easier) and it is a lot safer.

Recent Techrights' Posts

Writing and Coding Isn't Always Enough
Last year we had to assume a role we didn't have before: litigants
 
Why We Publish Information About the SLAPPs (But Not About the Legal Process), an Abuse of Process by Americans Trying to Silence Critics of Their Employer, Microsoft
It doesn't take thousands of pages to explain something simple
Internet Relay Chat Didn't Fall Off a Cliff
IRC will turn 40 in less than 3 years from now
The UEFI 9/11 - Part V - This is Not a Drill (Disable "SecureBoot" Now)
A "9/11" Coming
There's No Obligation to Speak to Anybody
The very fact that "bkuhn" is till spending time in social control media says a lot about his poor judgment
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, September 01, 2025
IRC logs for Monday, September 01, 2025
The Register MS Says "AI Web Crawlers Are Destroying Websites", So Why Does The Register MS Help 'AI' Companies? (Spoiler: Money)
People need to call out The Register MS on its hypocrisy
Microsoft Trying to Force People to Resign (Amid Mass Layoffs) a Strategy That Takes Its Toll
Microsoft seems to be circling down the drain and the "final flush" will be the moment the "hey hi" (AI) bubble implodes completely
Google Simply Cannot Be Trusted
Only fools would trust GAFAM
Admission That a Third Party (or Parties) Funds the SLAPPs Against Techrights
This can end up costing them over a million dollars
Modifying and Writing One's Own Computer Programs is Not a Crime (or: Google Proves That Stallman Was Right)
We're generally gratified to see so many positive mentions of him
Why We Stopped Publishing Videos (for Now)
We'll probably get back to videos one day, but it's hard to say when or to what extent
What Animal Rights Activism Teaches Us About Sympathy and Focus
It's possible to believe that the planet is warming, that we must do something about it, and still eat eggs and butter
When You Turn Web Sites About Tech Into Political Sites
A lot of people fall into the trap of catering only for particular groups
Gemini Links 02/09/2025: ROOPHLOCH 2025 and Lagrange 1.19 Released
Links for the day
Gemini Links 01/09/2025: News Corp. WSJ and A Month With NixOS
Links for the day
Slopfarms Already Peaked, They Will Die When Slop Companies Run Out of Money to Borrow
slopfarms will lack an actual "engine"
“Sideloading” Never Killed Anybody
There are many online discussions this week about the misnomer "sideloading"
Slopwatch: Google News as FUD Vector Against Linux and Plagiarism Enhancer, Serial Slopper (SS) Uses LLMs to Googlebomb "Linux"
Slop destroys the Web not just by screwing with search engines and helping plagiarists. It's also responsible for de facto DDoS attacks...
Links 01/09/2025: "Attacks on Science" and China's "Soft Power" Grows
Links for the day
Links 01/09/2025: Fresh Backlash Against Slop and "Norway’s Electricity Crisis is About to Hit Britain"
Links for the day
Links 01/09/2025: Catching Up (Mostly via Deutsche Welle), "Windows TCO" Effect in UK
Links for the day
Gemini Links 01/09/2025: Linguistic Barriers and "Web 1.0 Hosting"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, August 31, 2025
IRC logs for Sunday, August 31, 2025
Autumn Has Come
Autumn should be exciting in all sorts of ways; it'll also mark our anniversary
The UEFI 9/11 - Part IV - External Interference
They all seem to be playing a role in crushing Software Freedom and self-determination for users
Links 31/08/2025: Baggage Claim Scams, an Insurrectionist’s War on Culture, and a Sudden Robotics Hype
Links for the day
Gemini Links 31/08/2025: Reviewing Netsurf and Slightly Less Historic Ada Design
Links for the day
IBM Has Taken Control of GNOME
Don't expect a successor to be found any time soon
Links 31/08/2025: Google Gmail Data Breach and LF Puff Pieces for Pay
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, August 30, 2025
IRC logs for Saturday, August 30, 2025
This is What Google News Has Become
Moments ago