Incident

Stuxnet

incident:stuxnet Also: Stuxnet attack, Stuxnet operation

The cyber-sabotage operation in which centrifuges at Iran’s Natanz facility were damaged and the malware spread beyond its intended target.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
outgoing INVOLVES Stuxnet Explicit 29
outgoing TARGETS Iran Explicit 29
outgoing TARGETS Iran Explicit 89
outgoing COMPROMISES Natanz Explicit 29
outgoing INVOLVES centrifuge Explicit 29
outgoing INITIAL_ACCESS_VIA USB drive infection Explicit 29
outgoing INVOLVES International Atomic Energy Agency Explicit 29
outgoing INVOLVES Oak Ridge National Laboratory Explicit 29
outgoing INVOLVES Idaho National Laboratory Uncertain 29
outgoing ATTRIBUTED_TO Israel Uncertain 89

Claims

Stuxnet INVOLVES Stuxnet

The episode describes the Stuxnet incident as an attack involving the Stuxnet malware.

Explicit Confidence 99% · Jack Rhysider EP 29 Details

“This episode is about Stuxnet, the most sophisticated piece of malware to ever be discovered.”

Jack Rhysider · offsets 1038–1131

Stuxnet TARGETS Iran

The Stuxnet attack targeted Iran.

Explicit Confidence 99% · Jack Rhysider EP 29 Details

“Stuxnet burrowed its way deep into a nuclear facility in Iran”

Jack Rhysider · offsets 1364–1425

Stuxnet COMPROMISES Natanz

The Stuxnet operation penetrated the Natanz nuclear facility network and infected systems there.

Explicit Confidence 98% · Jack Rhysider EP 29 Details

“When the contractor with the infected computer went into the facility the virus spread all through the network”

Jack Rhysider · offsets 25162–25272

Stuxnet INVOLVES centrifuge

The incident involved the destruction and malfunction of centrifuges at Natanz.

Explicit Confidence 98% · Jack Rhysider EP 29 Details

“there were around 1,000 less working centrifuges compared to the last report”

Jack Rhysider · offsets 28557–28633

Stuxnet INITIAL_ACCESS_VIA USB drive infection

The attackers attempted to overcome Natanz’s air gap by placing Stuxnet on USB sticks and getting them into the facility.

Explicit Confidence 99% · Jack Rhysider EP 29 Details

“the attackers came up with the idea of putting the virus on a USB stick”

Jack Rhysider · offsets 17818–17889

Stuxnet INVOLVES International Atomic Energy Agency

IAEA inspectors visited Natanz and their reports provided evidence about centrifuge problems and the facility’s condition.

Explicit Confidence 98% · Kim Zetter EP 29 Details

“They started visiting Natanz a couple of times a month and they would write reports”

Kim Zetter · offsets 19149–19232

Stuxnet INVOLVES Oak Ridge National Laboratory

Oak Ridge National Laboratory was described as building centrifuge replicas and developing methods to damage them.

Explicit Confidence 96% · Jack Rhysider EP 29 Details

“out at Oakridge National Laboratory, they built a replica of the Natanz facility”

Jack Rhysider · offsets 15648–15728

Stuxnet INVOLVES Idaho National Laboratory

Idaho National Laboratory was associated with the operation because of its industrial-control-system expertise, though the episode hedges that it may have assisted.

Uncertain Confidence 88% · Jack Rhysider EP 29 Details

“They may have received help from scientists at the Idaho Lab too”

Jack Rhysider · offsets 11819–11883

Stuxnet TARGETS Iran

The Stuxnet attack is described as targeting Iran's nuclear enrichment facility.

Explicit Confidence 99% · Jack Rhysider EP 89 Details

“this was an attack on an Iranian nuclear enrichment facility”

Jack Rhysider · offsets 11925–11985

Stuxnet ATTRIBUTED_TO Israel

Jack says circumstantial evidence indicates that Israel, along with the United States, was behind Stuxnet; the attribution is not presented as certain.

Uncertain Confidence 75% · Jack Rhysider EP 89 Details

“the circumstantial evidence shows that the US and Israel were behind this attack.”