Stuxnet older than believed

Cyberweapon deployed in 2005

LONDON, Feb 27, (AP): The sophisticated cyberweapon which targeted an Iranian nuclear plant is older than previously believed, an anti-virus company said Tuesday, peeling back another layer of mystery on a series of attacks attributed by many to US and Israeli intelligence.

The Stuxnet worm, aimed at the centrifuges in Iran’s Natanz plant, transformed the cybersecurity field because it was the first known computer attack specifically designed to cause physical damage. The precise origins of the worm remain unclear, but until now the earliest samples of Stuxnet had been dated to 2009, and The New York Times — in the fullest account of the attack published so far — traced the origins of the topsecret program back to 2006.

In a new report issued late Tuesday, Symantec Corp. pushed that timeline further back, saying it had found a primitive version of Stuxnet circulating online in 2007 and that elements of the program

had been in place as far back as 2005.

Independent security experts who examined the report said it showed that the worm’s creators were well ahead of their time.

“To me, it’s amazing,” said Mikko Hypponen, whose Finland-based FSecure has studied Stuxnet. “We had no idea the US-Israel cyberoperations were so advanced already almost a decade ago.”

Hypponen is one of a host of experts who’ve concluded that Stuxnet was an attempt to sabotage the uranium enrichment centrifuges at Iran’s Natanz nuclear plant, a key element in the Islamic republic’s disputed atomic energy program. Because the United States and Israel are two of Iran’s biggest foes, the shadow of suspicion immediately settled on their tech-savvy intelligence services.

That theory got a boost when the Times reported that President George W. Bush had ordered the deployment of Stuxnet against Iran, laying out in unprecedented detail how the worm had been crafted so as to surreptitiously send Natanz’s centrifuge machines spinning out of control.

US and Israeli officials have long declined to comment publicly on Stuxnet or their alleged involvement in creating and deploying the computer worm.

Online:

The Symantec http://bit.ly/128ux2s

Raphael Satter can be reached at: http://raphae.li/twitter