Russian
computer virus prevention and control institutions Kaspersky Lab
released a report on the 28th, to confirm the new computer virus "flame"
to invade Iran, the Middle East countries. The
virus used to steal information, some characteristics similar to
previous attacks on Iranian nuclear facilities, computer systems Stuxnet
worm, but the structure is more complex, more damage.
Technical staff to network attack weapons "qualitative" flame ", suggesting that this virus may be a government background.
Efficacy more than any known virus
Kaspersky
Lab technical staff the Roel · Hopper, Berg said, "Flame" code amount
Stuxnet about 20 times, 100 times the ordinary commercial information
theft, virus, including about 20 program modules.
Kaspersky
Lab studies have shown that some of the characteristics of this virus
showing trojan virus and worm infected computer information can be
collected, can allow manipulators to remotely modify the computer
settings, turn on the computer microphone to collection of the
conversations of people nearby access to Bluetooth communication system, access to the computer screen shots, steal the Internet chats.
The
virus uses the Windows operating system vulnerabilities invasion, can
take advantage of the local area network, print, network and USB
interfaces, such as the spread. The virus writers with about 80 servers in North America, Europe and Asia to manipulate the virus.
Kaspersky
Lab, said in a press release of the official website to measure the
effectiveness of the complexity and functionality, the new appearance of
the "flame" virus "than known any kind of computer virus.
Symantec
(Symantec) and McAfee (McAfee) software security technology companies
have confirmed the discovery of the "flame" virus. Symantec's
technical staff, Vikram Thakur told a Reuters reporter, the virus "very
likely" is one of the most complex malicious programs have been found.
Middle Eastern countries into the "hardest hit"
Kaspersky
Lab confirmed that the "flame" has invaded the Middle East, Iran,
Israel, Palestine, Syria, Lebanon, Saudi Arabia and Egypt and other
countries and regions, large numbers of computers worldwide by the
number of infected computers estimation in 1000 to 5000 units.
Iran's national computer emergency response team confirmed the discovery of this virus. This
institution in its English website released the news that the "flame"
may be associated with Iran from the computer system information theft.
Kaspersky
Lab, said the report Iran to the International Telecommunication Union,
these incidents of this United Nations agency subsequently commissioned
by the Kaspersky Lab survey, one of the findings found that the "flame"
virus.
Lab
technicians concluded that the "flame" some of the characteristics
previously found worm Stuxnet and industrial systems data theft the
virus Duqu similar display three viruses may be "clan".
About 30 000 Internet terminals in Iran and the Bushehr nuclear power plant employees PC 2010 was Stuxnet virus infection. The
worm program specifically for the German company Siemens industrial
control systems widely used in infrastructure, clear purpose of attack
were referred to as the world's first digital warheads ".
Hungary passwords and system security laboratory to study the "flame" the virus for several weeks. Kaspersky
Lab confirmed that at this stage no indication that this virus can
attack the infrastructure, delete data, or constitute other physical
damage. Technical staff stressed that the study also involved the "flame" in the "initial stage".
Virus behind or government support
Kaspersky said that the "flame" virus "network weapons used to attack a number of countries". Some
network security experts determined that the "flame" may be known
following the Stuxnet and Duqu, 3 "network heavy weapons".
A
lot of technical personnel to the complex structure and a wide range of
attack range of the "flame" speculated that the virus might be behind
one or more government support, the "culprit" may be the initiator of
Stuxnet and Duqu,. University
of Surrey, UK Department of Computer Science, Professor Alan Woodward
said: "This virus does not write in the bedroom by a number of young
people."
Iranian officials have previously identified Stuxnet virus for the United States and Israel. "The
New York Times reported in January last year, the Stuxnet" by U.S. and
Israeli intelligence agencies may work together to manufacture, used to
stop Iran's nuclear activities. U.S. officials refused to respond to this argument.
Kaspersky
Lab CEO Eugene Kaspersky said: "Network warfare has become the field of
information security in recent years were the hottest meeting topics.
'Flame' seems to imply that another phase of the war."
Passwords
and system security laboratory personnel Ben Chiat said, "flame"
may be at least five years ago, or even eight years ago, is activated. Kaspersky
Lab confirmed that this virus since March 2010, "rampant" activities,
because of its complexity and selectivity of the target, the security
software has not been able to find it.
This conclusion, if established, means that the virus behind the "culprit" Today's technology is more advanced. Mohan
library, the senior management of British Internet security company
Dtex Systems, said: "I fear that if they are five years ago will be able
to make this thing ('flame'), then they are developing what?"
没有评论:
发表评论