Iran says has detected Duqu computer virus

Related Topics

EDITORS' NOTE: Reuters and other foreign media are subject to Iranian restrictions on leaving the office to report, film or take pictures in Tehran. REUTERS/Raheb Homavandi

EDITORS' NOTE: Reuters and other foreign media are subject to Iranian restrictions on leaving the office to report, film or take pictures in Tehran.

Credit: Reuters/Raheb Homavandi

TEHRAN | Sun Nov 13, 2011 3:20pm EST

TEHRAN (Reuters) - Iran said on Sunday it had detected the Duqu computer virus that experts say is based on Stuxnet, the so-called "cyber-weapon" discovered last year and believed to be aimed at sabotaging the Islamic Republic's nuclear sites.

The head of Iran's civil defense organization told the official IRNA news agency that computers at all main sites at risk were being checked and that Iran had developed software to combat the virus.

"We are in the initial phase of fighting the Duqu virus," Gholamreza Jalali, was quoted as saying. "The final report which says which organizations the virus has spread to and what its impacts are has not been completed yet.

"All the organizations and centers that could be susceptible to being contaminated are being controlled," he said.

News of Duqu surfaced in October when security software maker Symantec Corp said it had found a mysterious virus that contained code similar to Stuxnet.

While Stuxnet was aimed at crippling industrial control systems and may have destroyed some of the centrifuges Iran uses to enrich uranium, experts say Duqu appeared designed to gather data to make it easier to launch future cyber attacks.

Symantec said: "Duqu is essentially the precursor to a future Stuxnet-like attack." Instead of being designed to sabotage an industrial control system, the new virus is designed to gain remote access capabilities, it said in a report issued last month.

Iran said in April it had been targeted by a second computer virus which it identified as "Stars." It was not immediately clear if Stars and Duqu were related but Jalali described Duqu as the third virus to hit Iran.

Tehran said Stuxnet had not inflicted serious damage before it was detected and blamed the United States and Israel for the virus which appeared to be aimed at crippling the nuclear program they say is aimed at making atomic weapons, a charge Iran denies.

The International Atomic Energy Agency issued a report last week that contained what it called credible evidence pointing to military dimensions to Iran's atomic activities, fueling demands in Washington and Europe for further sanctions.

Iran dismissed the report as politicized and full of "lousy" and unreliable intelligence work. The speaker of Iran's parliament said on Sunday the assembly would "review" relations with the U.N. nuclear watchdog.

(Additional reporting by Ramin Mostafavi; Writing by Robin Pomeroy; Editing by Janet Lawrence)

Related Quotes and News

Company
Price
Related News
We welcome comments that advance the story through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters. For more information on our comment policy, see http://blogs.reuters.com/fulldisclosure/2010/09/27/toward-a-more-thoughtful-conversation-on-stories/
Comments (8)
Zoloff wrote:
So why is Symantec helping Iran out with this information?

Nov 13, 2011 7:14pm EST  --  Report as abuse
bencsathb wrote:
Duqu: A Stuxnet-like malware found in the wild, technical report
Laboratory of Cryptography of Systems Security (CrySyS). 14 October 2011.

http://www.crysys.hu/publications/files/bencsathPBF11duqu.pdf

Nov 13, 2011 8:26pm EST  --  Report as abuse
Intriped wrote:
What is this company Symantec doing there. I thought they were an American organization?

Nov 14, 2011 12:38pm EST  --  Report as abuse
This discussion is now closed. We welcome comments on our articles for a limited period after their publication.