Duqu, Stuxnet link unclear

[InfoSec News <alerts () infosecnews org>]

http://www.computerworld.com/s/article/9221234/Duqu_Stuxnet_link_unclear

By Jaikumar Vijayan
Computerworld
October 26, 2011

A report by Dell SecureWorks on Wednesday debunked the idea that the 
newly discovered Duqu Trojan is related to last year's Stuxnet worm or 
was created by the same authors.

According to SecureWorks, there are some similarities in code and 
function between Duqu and Stuxnet, but there's little conclusive proof 
the two are linked. "Supporting evidence is circumstantial at best and 
insufficient to confirm a direct relationship," SecureWorks said.

The Duqu Trojan was discovered earlier this month by a little-known 
Hungarian lab called the Laboratory of Cryptography and System Security. 
In a report last week, Symantec called the Trojan a precursor to the 
next Stuxnet and said that Duqu shared a lot of its source code with 
Stuxnet and was likely created by the same authors.

Unlike Stuxnet, Duqu is not directly targeted at industrial control 
systems, Symantec noted. Its main purpose is to let attackers steal data 
from manufacturers of industrial control systems that can then be used 
to craft attacks against entities using such systems.

[...]


_____________________________________________________
Subscribe to InfoSec News - www.infosecnews.org
http://www.infosecnews.org/mailman/listinfo/isn