New Flame-related computer virus found in Middle East
Shares similarities with damaging malware like Flame, Stuxnet
The Associated Press
Posted: Aug 10, 2012 9:57 AM ET
Last Updated: Aug 10, 2012 9:55 AM ET
A cybersecurity analyst looks at computer code in the U.S. government’s cyberdefence lab in Idaho Falls, Idaho, which is intended to weed out possible threats to the nation's energy infrastructure and other assets. The U.S. and other nations have stepped up their cyber defences lately as ever more powerful malware is uncovered that targets government computer systems. One such cyberweapon was discovered this week by Russian cybersecurity firm Kaspersky Lab. (Mark J. Terrill/Associated Press)
A new computer virus tied to some of the most sophisticated cyberweapons thus far discovered has been found circulating in the Middle East, a Moscow-based computer security company said Thursday.
If a link were confirmed, the find would expand the electronic arsenal reportedly deployed by the U.S. and Israel against their rivals in the region.
Kaspersky Lab ZAO said in a statement that the new virus, dubbed "Gauss," was aimed at stealing financial information from customers of a series of Lebanese banks.
The firm said that similarities in coding, structure and operation meant it could say "with a high degree of certainty" that Gauss was related to Flame, a sophisticated piece of spyware that prompted an internet blackout across Iran's oil industry in April, and to Stuxnet, an infrastructure-wrecking worm whose discovery revolutionized the cybersecurity field.
The statement acknowledged that much remained unclear about the virus's capabilities — including its ultimate purpose. Kaspersky said that the virus's command-and-control servers were shut down last month, meaning that, for the time being, "the malware is in a dormant state."
Shares similarities with Flame
Kaspersky outlined several similarities that Gauss shared with Flame, a program that was recently discovered vacuuming information from computers in Iran.
So powerful was the spyware that in late April, Iranian officials briefly disconnected the entire country's oil industry — including the Oil Ministry, energy rigs and the strategic Khark Island oil terminal — in a bid to contain Flame's data theft.
Flame, also knonw as Flamer or skyWIper, in turn has been linked to Stuxnet, an ambitious program aimed at sabotaging uranium enrichment at Iranian nuclear facilities. Stuxnet's discovery in 2010 was of particular interest to cybersecurity professionals because it interfered with the action of German-made centrifuges — the most high-profile example to date of a computer virus causing physical havoc at an industrial facility.
Recent reports in the New York Times and the Washington Post have tied both Flame and Stuxnet to a secret U.S.-Israeli program aimed at destabilizing Iran's atomic energy program, which many Western countries believe is a cover for the development of nuclear weapons.
It isn't exactly clear how Gauss would fit in to such a program, and Kaspersky acknowledged that stealing money from banks didn't seem like an activity state-backed actors were likely to be engaged in.
Other anti-virus firms were still digesting Gauss's code.
"People are definitely getting excited about it because of the supposed connection to Flame and Stuxnet," Chris Astacio, of San Diego-based Websense, said in telephone interview. "But without looking at the binary (the raw code of the virus) we can't really comment."
Kaspersky said it was working with the International Telecommunication Union to notify those affected by the infection.
A call and an email to the Geneva-based organization were not immediately returned.
Share Tools
Top News Headlines
- Senator Pamela Wallin leaves Conservative caucus
- Senator Pamela Wallin says she is recusing herself from the Conservative caucus while her travel expense claims are under scrutiny. Wallin's departure comes one day after Senator Mike Duffy left the Tory caucus amid controversy over his expense claims.
more »
- Toronto Mayor Rob Ford denies crack cocaine allegations
- Toronto Mayor Rob Ford says allegations he was caught on tape smoking crack are "ridiculous," following reports that someone had been trying to sell a purported recording of such an event to U.S. and Canadian media outlets. more »
- Sailor fighting cancer says AWOL charges dropped
- All charges against a Nova Scotia woman in the Royal Canadian Navy who is fighting cancer, and who was charged with being absent without leave and facing a court martial have been dropped, the woman and her lawyer say. more »
- Should genetic testing for cancer be available to all Canadians?
- The revelation that Hollywood celebrity Angelina Jolie had a double mastectomy as a preventative measure against cancer stoked heated discussion this past week, but one prominent cancer researcher says it demonstrates the need to make genetic testing available to all Canadians. more »
- 12 young leaders changing Canada in this week's Generation Why
- If the number of young entrepreneurs and innovators in Canada is any indication, the generation that came of age alongside the modern web is ready to rethink everything. Meet 12 young people our readers nominated as the most dedicated, impressive, creative and intelligent Canadians under the age of 30 they know. more »
Must Watch
Latest Technology & Science News Headlines
- 2 earthquakes felt in Ontario and Quebec
- Two earthquakes near the Ontario-Quebec border could be felt across both provinces this morning. more »
- Chris Hadfield's translator: Q&A with Canadian astronaut Jeremy Hansen
- While Chris Hadfield was returning from the International Space Station on Monday night, another Canadian astronaut was offering his own unique play-by-play of the action as the Soyuz capsule plunged to Earth. more »
- Why some Canadians want to die on Mars
- More than 80,000 people have applied for a Dutch non-profit organization's proposed one-way trip to Mars. Anna Maria Tremonti, host of The Current, spoke to four Canadians — two Mars one applicants, a member of the Mars One team, and astronaut Julie Payette — about whether it's a good idea. more »
- Is warp speed possible?
- Star Trek Into Darkness hit the big screen this week, taking moviegoers back to a science fiction universe where starships are capable of warp speed, crossing light years of interstellar space in minutes. But is that scientifically possible? And if so, how? more »
Bob McDonald's Blog
Chris Hadfield: The gravity of gravity May. 17, 2013 9:58 AM After five months of being Superman and a media superstar, Canadian astronaut Chris Hadfield is now beginning the challenging task of adapting his mortal body and brain to life back on Earth.
Quirks & Quarks
- May 18: Apps for Apes May. 17, 2013 4:26 PM Scientists at more than 2 dozen zoos around the world, including the Toronto Zoo, have been using computer tablets to stimulate our bright orange primate cousins, the orangutans. And the orangutans have been loving it.
Latest Features
- Senator Pamela Wallin leaves Conservative caucus
- Toronto Mayor Rob Ford denies crack cocaine allegations
- Tim Bosma public memorial Wednesday in Hamilton, Ont.
- Dennis Oland named as prime suspect in father's slaying
- Public raising funds to buy alleged Rob Ford crack video
- Sailor fighting cancer says AWOL charges dropped
- Milwaukee bar wins overturn of bra ban
- 2 earthquakes felt in Ontario and Quebec
- Lawyer says RCMP refuses to mediate harassment suit

