Iran says it has detected second cyber attack

TEHRAN Mon Apr 25, 2011 5:55am EDT

Related Topics

TEHRAN (Reuters) - Iran has been targeted by a second computer virus in a "cyber war" waged by its enemies, its commander of civil defense said on Monday.

Gholamreza Jalali told the semi-official Mehr news agency that the new virus, called "Stars," was being investigated by experts.

"Fortunately, our young experts have been able to discover this virus and the Stars virus is now in the laboratory for more investigations," Jalali was quoted as saying. He did not specify the target of Stars or its intended impact.

"The particular characteristics of the Stars virus have been discovered," Jalali said. "The virus is congruous and harmonious with the (computer) system and in the initial phase it does minor damage and might be mistaken for some executive files of government organisations."

Jalali warned that the Stuxnet worm, discovered in computers at Iran's Bushehr nuclear reactor last year, still posed a potential risk. Some experts described it as the world's first "guided cyber missile," aimed at Iran's atomic program.

Iranian officials said they had neutralized Stuxnet before it did the intended damage to its nuclear facilities. They blamed Israel and the United States -- which believe Iran is seeking nuclear weapons -- for the virus.

Iran says its nuclear program is entirely peaceful.


The existence of Stuxnet became public knowledge around the time that Iran began loading fuel into Bushehr, its first nuclear reactor, last August. Iran said in September that staff computers at Bushehr had been hit but that the plant itself was unharmed.

Bushehr is still not operational, having missed several start-up deadlines. This has prompted speculation that Stuxnet damaged the plant, something Iran denies.

Officials have said the virus could have posed a major risk had it not been discovered and dealt with before any major damage was done.

Some defense analysts say the main target was more likely to be Iran's uranium enrichment program. Enrichment creates fuel for nuclear power plants or, if pursued to a much higher degree, can provide material for an atomic bomb.

Jalali said Stuxnet might still pose a risk. "We should know that fighting the Stuxnet virus does not mean the threat has been completely tackled, because viruses have a certain life span and they might continue their activities in another way."

He urged the government to take action against the enemies he said were waging cyber war on Iran.

"Perhaps the Foreign Ministry had overlooked the options to legally pursue the case, and it seems our diplomatic apparatus should pay more attention to follow up the cyber wars staged against Iran," Jalali said.

(Additional reporting by Hossein Jaseb; Writing by Ramin Mostafavi; Editing by Robin Pomeroy and Mark Trevelyan)

We welcome comments that advance the story through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters. For more information on our comment policy, see
Comments (5)
MajorVariola wrote:
Stuxnet was about crashing centrifuges.

Other attacks via software are to be expected.

Once the reactor goes critical, messing with physical
plants becomes dangerous to civilians.

Apr 25, 2011 2:48pm EDT  --  Report as abuse
USAPragmatist wrote:
Hey Iran, if you do not want computer worms, STOP TRYING TO MAKE NUKES!

it is that easy.

Apr 25, 2011 5:24pm EDT  --  Report as abuse
Shukla wrote:
why should iran not be allowed to make nukes when it is more likely than USA to be attacked by an invading army, but USA be allowed to sit on a stockpile large enough to blow up the earth several times over, despite of killing more people/year (in a foreign country, so doesnt include avoidable starvation deaths, intra country civil war etc) than any other country?

Apr 25, 2011 5:43pm EDT  --  Report as abuse
This discussion is now closed. We welcome comments on our articles for a limited period after their publication.