Stuxnet: The Cyber Weapon That Destroyed Iran's Nuclear Program

  Рет қаралды 502,696

Warographics

Warographics

Күн бұрын

Delve into the shadowy world of international espionage with Warographics as we uncover the gripping tale of STUXNET. From its covert inception in 2007 to its explosive revelation and the unsolvable mysteries it left behind.
→ Subscribe for new videos at least twice a week!
kzfaq.info...
Love content? Check out Simon's other KZfaq Channels:
MegaProjects: / @megaprojects9649
SideProjects: / @sideprojects
Casual Criminalist: / @thecasualcriminalist
Today I Found Out: / todayifoundout
Highlight History: / @highlighthistory
XPLRD: / @xplrd
Brain Blaze: / @brainblaze6526
Places: / @places302
Astrographics: / @astrographics-ve4yq
Simon's Social Media:
Twitter: / simonwhistler
Instagram: / simonwhistler

Пікірлер: 765
@CubensisEnjoyer
@CubensisEnjoyer 15 күн бұрын
Been studying cybersecurity for several years and working as a Security Analyst some of that time as well, so I'm all too familiar with Stuxnet, but I will never get tired of hearing this story. Stuxnet was truly a monumental achievement (for someone at least) and a total game changer in terms of how offensive cyber operations were viewed. One of my favorite case studies that I constantly return to in my career, I still gain new insights every time I do so. Happy to say that Warographics did the story justice! And the crazy part is this video is just the tip of the "Stuxnet lore" iceberg.🤯
@goosenotmaverick1156
@goosenotmaverick1156 15 күн бұрын
Have you heard the podcast from Jack Rhysider called "Darknet Diaries"? I assume you likely have, but that's a good one on it too if you haven't had a listen. (Good podcast in general too, IMO)
@CubensisEnjoyer
@CubensisEnjoyer 15 күн бұрын
@@goosenotmaverick1156 That was pretty much the spark for why I got into cybersecurity, Stuxnet was the first episode I listened to after the Silk Road ones. After that it was set in stone. I owe a lot to Jack Rhysider for giving us Darknet Diaries 🙂
@motianton
@motianton 15 күн бұрын
Hes a topguy, thanks for reminding me abt him ​@@goosenotmaverick1156
@mastpg
@mastpg 15 күн бұрын
You misspelled "Israeli counter intelligence in conjunction with a joint NSA-CIA team".
@jeebusk
@jeebusk 15 күн бұрын
only one joint? ​@@mastpg
@LeviThomass
@LeviThomass 15 күн бұрын
As a computer science student, this stuff is fascinating to me. I found a video about Stuxnet recently and had been wanting a video from you breaking it down ever since!
@CheekyMenace
@CheekyMenace 15 күн бұрын
Watch, Zero Days.
@jasonjacoby
@jasonjacoby 15 күн бұрын
The virus didn't just require a USB stick, it could embed itself on devices that used the USB port. Seriously one of the smartest weapons I've ever seen.
@theredboneking
@theredboneking 15 күн бұрын
Used on the Fukushima nuclear plant as well.
@freedombro6502
@freedombro6502 15 күн бұрын
​@@theredbonekingsource ? 🤔
@theredboneking
@theredboneking 15 күн бұрын
@@freedombro6502 FUKUSHIMA: 10 reasons our planet is doomed (2018)
@theredboneking
@theredboneking 15 күн бұрын
@@freedombro6502 #8
@theredboneking
@theredboneking 15 күн бұрын
Number eight on the list.
@SirSpenace
@SirSpenace 15 күн бұрын
I learned about Stuxnet back in 2011 when I was taking a Cybercrimes course in Ireland. I remember being blown away by how smart of a program it was.
@jochn919
@jochn919 14 күн бұрын
In 2011 that's when Israelis used Stuxnet on Fukushima plant.
@windowsill9724
@windowsill9724 14 күн бұрын
@@jochn919no
@hammerr
@hammerr 14 күн бұрын
Took less than 20 people too
@Frost640
@Frost640 11 күн бұрын
@@jochn919 Did you miss the part of history when a god damn earthquake and tsunami hit Japan?
@patrickbrinkmeier1858
@patrickbrinkmeier1858 10 күн бұрын
@@Frost640 ...He doesn't care about facts or the truth...Just a typical troll.
@4-Methylaminorex
@4-Methylaminorex 15 күн бұрын
Countdown to zero day is a great book about Stuxnet.
@remember2023
@remember2023 15 күн бұрын
This.
@HawkThis
@HawkThis 15 күн бұрын
@@remember2023 They are all targets
@jasonlib1996
@jasonlib1996 15 күн бұрын
Literally finished listening to the audiobook about 2 days ago, and now this video comes out! "get out of my head simon!" But fully agree, a really good and interesting book
@CheekyMenace
@CheekyMenace 15 күн бұрын
There's also a documentary called, Zero Days.
@FBA-REPARATIONS-NOW
@FBA-REPARATIONS-NOW 15 күн бұрын
You probably think your picture is funny. But the fact is, your kind can't compete against us where it counts. We have it on lock and don't have to resort to gutter pfps.
@ignitionfrn2223
@ignitionfrn2223 15 күн бұрын
1:45 - Chapter 1 - The timeline 18:55 - Chapter 2 - The unsolvable equation ; fanny , flame & flowershop 22:00 - Chapter 3 - The future
@armlegx
@armlegx 15 күн бұрын
I think $300M/year of delay is actually decent. In comparison to a "new bomb" which would need its own research and development and a bespoke production line for a limited number of bombs and it looks like maybe a wash.
@rootigaroot9922
@rootigaroot9922 15 күн бұрын
Exactly my thoughts, conventional weapons always cost significantly more in R&D (not to mention the cost of physical resources as well)
@Calebgoblin
@Calebgoblin 15 күн бұрын
I remember being told about this as a cautionary tale of the dangers of picking up random USB sticks
@sketch6995
@sketch6995 14 күн бұрын
I found one in a parking lot a few days ago.....I sandboxxed the hell out of it and found......porn
@mikeyhendri
@mikeyhendri 13 күн бұрын
For the ones asking. Stuxnet dit copy itself on usb drives. Once the plc are updated, the virus send files to the drive, and if that drive is connected to a computer that is connected to the internet it sends data back. No plant is compledley airgapped. Just the most importand machines
@hgv1883
@hgv1883 10 күн бұрын
A very reasonable explanation thanks 👍🍻
@Ampersandbonerjam
@Ampersandbonerjam 15 күн бұрын
British V sauce man never stops bringing the content
@THE-X-Force
@THE-X-Force 15 күн бұрын
lol .. he wishes he was VSauce
@AverageFornaxEnjoyer
@AverageFornaxEnjoyer 15 күн бұрын
I cannot unsee it.
@Callingoutrtards
@Callingoutrtards 15 күн бұрын
​@@THE-X-Forceyou wish you had a fraction of either men's influence
@verse8833
@verse8833 15 күн бұрын
Vsauce is awesome!
@THE-X-Force
@THE-X-Force 15 күн бұрын
@@Callingoutrtards lol .. I'm not the one who brought it up and believe me .. I'm perfectly fine with who and what I am. I don't want anything that I do not have.
@JonMidtan
@JonMidtan 15 күн бұрын
The script is usually very tight on here. 'An existential crisis to their existence' The exception that proves the rule.
@bitmau5
@bitmau5 15 күн бұрын
I remember when this happened. I also vividly remember, how at the time, my work place was full of PLC's. I was very tech minded and a lot of access to things that I probably shouldn't have. Stuxnet was some scary stuff, for the potential havoc it could wreak on just about any company, anywhere with a PLC. It just made me realize how exposed we are when it comes to hardware security.
@Bobbias
@Bobbias 11 күн бұрын
Especially since it was (and often still is) rare for companies to take PLC security that seriously. It's also frustrating that many PLC manufacturers like to hid behind obscurity as security rather than keep information out in the open so it can be properly audited by people who actually care about security.
@SavageDragon999
@SavageDragon999 15 күн бұрын
If Natanz was truly airgap, how could the virus send information back to the US?
@night_light2867
@night_light2867 15 күн бұрын
There are ways an app can use any piece of wire as a transmitter same as how phones use headphone jack as radio antennas and there are many more ways
@jacko101
@jacko101 15 күн бұрын
Exactly what I was thinking...!
@SavageDragon999
@SavageDragon999 15 күн бұрын
@@night_light2867 This crucial piece of information should've been addressed in the video in depth because without a way to transmit information, it's useless.
@d_n_u
@d_n_u 15 күн бұрын
Do y'all have any video recs on the topic, did a quick search but found nothing :(
@THE-X-Force
@THE-X-Force 15 күн бұрын
OTHER computers that were infected sent information back. Not the air-gapped ones.
@user-rd6ii6mp1t
@user-rd6ii6mp1t 15 күн бұрын
I had to write a report on this when I was taking cybersecurity classes. Definition of a watershed moment.
@user-rd6ii6mp1t
@user-rd6ii6mp1t 15 күн бұрын
@@rosem7889 wa·ter·shed /ˈwôdərˌSHed,ˈwädərˌSHed/ noun noun: watershed; plural noun: watersheds 1. an area or ridge of land that separates waters flowing to different rivers, basins, or seas. an area or region drained by a river, river system, or other body of water. 2. an event or period marking a turning point in a course of action or state of affairs. "these works mark a watershed in the history of music" Thanks, Google!
@Cumdown
@Cumdown 15 күн бұрын
Watershed is (and I start with this as I find it interesting) the catchment area of rivers, streams, lakes. The line between each catchment area is rather definitive, hence its use. A watershed moment refers to a deep change in thinking, approach, direction, of how one thinks about something. Hope the above helps ❤
@harku123
@harku123 15 күн бұрын
​@@rosem7889 watershed moment means an important point in history that would change the future
@ZeSgtSchultz
@ZeSgtSchultz 13 күн бұрын
​@@harku123I wonder if the first watershed moment was the flood after the ice age?
@BrandonQ1995
@BrandonQ1995 15 күн бұрын
I remember all the talk about Russia's cyber warfare capabilities on the lead up to its invasion of Ukraine. Ended up falling flat. As much as the complexity of viruses are growing, it seems our capabilities in fighting them are as well. Or, Russia just sucks at cyber warfare.
@tom.m
@tom.m 15 күн бұрын
I haven't kept up with it, but they did a lot in the early days. News reporters were struggling to do their job as any PC connected to Ukrainian internet got hacked. Many of them ended up sharing a single laptop with a satellite connection.
@theforsakeen-9014
@theforsakeen-9014 15 күн бұрын
don't you hear on the news everyday how china has already stolen even IP or data in the US that can be reached digitally? And russia don't steal as much but they are widely suspected to be the ones behind the shadow broker group, as their cyber capabilities are second only to the US.
@user-tm9qs7jo9j
@user-tm9qs7jo9j 14 күн бұрын
And Russia has prioritized going after the weakest part of every computer on Earth...the user.
@tomlxyz
@tomlxyz 9 күн бұрын
I assume to some degree they don't want to take everything down but rather use it to spy. If nothing works it won't get new input which could be strategically useful information
@Hillary4SupremeRuler
@Hillary4SupremeRuler 7 күн бұрын
Yes...they hacked the Clinton Campaign with a regular old gmail password reset phishing link ​@@user-tm9qs7jo9j
@FlyWithFitz81
@FlyWithFitz81 15 күн бұрын
Not to be confused with Suxnet, the.... other way to make things blow.
@rjhabib3678
@rjhabib3678 15 күн бұрын
😂😂😂
@warthunder-mf8nv
@warthunder-mf8nv 15 күн бұрын
rofl
@BonShula
@BonShula 15 күн бұрын
@@rjhabib3678 What is that PFP? Igor
@dieselgoinham
@dieselgoinham 15 күн бұрын
Can I purchase this software for my wife?
@marilynlucero9363
@marilynlucero9363 15 күн бұрын
You win the internet for the day. Congratulations.
@THE-X-Force
@THE-X-Force 15 күн бұрын
Has this ever been made into a movie? Because it should be.
@dat_asian_dude
@dat_asian_dude 15 күн бұрын
It has. Check out Zero Days.
@THE-X-Force
@THE-X-Force 15 күн бұрын
@@dat_asian_dude Sweet .. thank you!
@dat_asian_dude
@dat_asian_dude 15 күн бұрын
@@THE-X-Force anytime dude! Easiest way to watch it is on Max but I think youtube has it for like 5 bucks
@ZechsMerquise195
@ZechsMerquise195 15 күн бұрын
I remember when news of Stuxnet first appeared. I was studying IT at the time and didn't really grasp the enormous possible consequences. Some people I studied with, and who had a lot more experience, were terrified. Some thought it might spell the end of the internet.
@Votrae
@Votrae 15 күн бұрын
TIL "specialisms" is a word. Excellent writing and presentation as always!
@tjr3357
@tjr3357 14 күн бұрын
So I have watched a few of your videos, and while I have liked them, I also didn’t really know the subject matter. This one I did, and out of curiosity, I looked and noticed you followed the Wikipedia page on this subject pretty closely/exactly. You have good presentation, and for those unfamiliar with the various subjects you cover, these are great videos. It would be cool to see deeper dives with some independent research, alternate sources, etc.
@SkyWolfPirate
@SkyWolfPirate 15 күн бұрын
Yes thank you was watching old video on this the other day
@chingading957
@chingading957 13 күн бұрын
Fascinating video. Please do more on cybersecurity
@kennethnielsen3864
@kennethnielsen3864 15 күн бұрын
Thanks for sharing.
@MrTexasDan
@MrTexasDan 14 күн бұрын
The Stuxnet operation crosses the line into art. So elegant and clever.
@scylla88shawn14
@scylla88shawn14 13 күн бұрын
Amazing Episode Simon 👏
@Vicarious_Heart
@Vicarious_Heart 15 күн бұрын
Stuxnet is gonna need a sequel soon.
@mcboat3467
@mcboat3467 15 күн бұрын
And it would be used on apartheid state of Israel
@Sam_Guevenne
@Sam_Guevenne 15 күн бұрын
It's called Pegasus
@ymtzlgn
@ymtzlgn 15 күн бұрын
@@mcboat3467lol keep dreaming
@freedombro6502
@freedombro6502 15 күн бұрын
Israel is NOT an apartheid state. South africa has no moral ground to stand on ​@mcboat3467
@willyvereb
@willyvereb 15 күн бұрын
​@@freedombro6502 Lot of people are blind to the complete insanity which is going on South Africa. They kill tens of thousands in violent activities even though they don't have an active war in a tiny region constraining 2 millions to the size of Las Vegas to worry about. There are a lot of terrible things going on there and Gazan needs more help than ever. I just wonder where had been these outcries and protests when other countries used poison gas against minorities, interred an entire population into rape camps or stole all children to re-educate them to another culture. It's easy to blame a minority culture which has good standing with the West and is put against a billion Arabs. It is apparently much harder to actually call out evil deeds done by the side which keeps funneling them all the money to embezzle...
@WolfhasaWASR
@WolfhasaWASR 15 күн бұрын
Fantastic job
@landlubbber
@landlubbber 15 күн бұрын
Worth noting that we actually don't know just how effective the Stuxnet development was, since it's possible that many techniques and maybe other zero-days are still in use in other attacks around the world.
@revcor632
@revcor632 9 күн бұрын
We don’t “know” nearly as much as this video suggests… it relies pretty heavily on one questionable article as its “source”
@ngrin3209
@ngrin3209 15 күн бұрын
Love the content.. always! But give me longer to sit up and like the video/check that I have when it finishes!!! ahah
@rcwlson1
@rcwlson1 13 күн бұрын
aaaaah I love the 80's action movie one liners at the end of your videos.
@henrychinaski846
@henrychinaski846 3 күн бұрын
Simon, you're an incredibly great presenter! While watching this video I thought of the work and dedication of the author/writer! You have a great staff! They deserve more attention! Thank you for your great work!
@SuperNesus
@SuperNesus 15 күн бұрын
What a throwback! Clicked as soon as i saw that name!!!
@jerichoroad5814
@jerichoroad5814 13 күн бұрын
Cool stuff Simon
@ratchet2505
@ratchet2505 15 күн бұрын
The most scary part, most maleare is sitting dormant waiting for an action command to start attacking. We haven't even had the first real spark yet.
@scheikundeiscool4086
@scheikundeiscool4086 11 күн бұрын
I do wonder if this fact is something that is stopping nuclear war. Because all sides are now scared that their own weapons are compimised and an attack might backfire.
@antoy384
@antoy384 10 күн бұрын
@@scheikundeiscool4086Given that the average programmer on Stuxnet wasn’t better than the average consultant (the only genius was bought by the mass of developers working on it), I can’t imagine what a missile infested with viruses from all nations would look like. Indeed, no one would be able to launch it.
@revcor632
@revcor632 9 күн бұрын
What makes you think that “most malware” is like this..?
@tomlxyz
@tomlxyz 9 күн бұрын
I'm wondering how much of this type of malware like Stuxnet is out there that is already doing its work but doing it so slowly that it doesn't get detected. Like imagine attacking a company or a whole country in a way that they become just slightly too inefficient to still run profitable/having GDP growth. Kinda like killing someone with a slow acting poison so it looks they just died of an illness
@m2heavyindustries378
@m2heavyindustries378 Күн бұрын
Man couldn't even spell 'malware' properly with the help of spellcheck and cut and paste, it's likely just some edgy teen on his family computer
@charleswomack2166
@charleswomack2166 15 күн бұрын
I absolutely love how Simon uses his voice to keep everyone on the edge of their seat.
@dh1380
@dh1380 15 күн бұрын
"An existential threat to its existence" I see 😅 IIRC it was also Dutch nuclear technology that was stolen by AQ Kahn, the world's most prolific illegal nuclear proliferator and guy who gave Pakistan the bomb.
@duke6961
@duke6961 15 күн бұрын
Keep up with these informative and entertaining videos.
@imadeafunny2109
@imadeafunny2109 15 күн бұрын
I feel like Simon & Team is fast becoming my Walter Cronkite
@Bozbaby103
@Bozbaby103 15 күн бұрын
He (and co) and Beau of the Fifth Column are my go-tos.
@yanikq
@yanikq 2 күн бұрын
Usually a religious Warographics listener, but rolled my eyes on the release of this stuxnet episode. So didn't listen to it immediately but I'm grateful for "the algorithm" sneaking it into the autoplay-list. I thought I already knew everything there was to know but then Mr. Whistler's team goes and unearthed the Dutch connection. Well done, well done 👏
@puffpio
@puffpio 12 күн бұрын
One thing I don’t understand: you said the computer system was air gapped (no internet connection) but later the work was able to get updates remotely, how if there’s no internet connection?
@winstonsmith6204
@winstonsmith6204 14 күн бұрын
These videos are top notch
@torinnbalasar6774
@torinnbalasar6774 15 күн бұрын
The story I had originally heard about how Stuxnet infiltrated the facility was a usb drive dropped in the parking lot. Had no idea it was a long-term program with two-way communication rather than a single attack destroying the centrifuges. The description I was aware of had claimed that the worm cloned parts of itself onto more usb drives to carry it back out of the facility in order to reach an internet-connected device it could deliver a "job complete" message through, but if it was able to receive updates regularly, there was clearly a more reliable communication method established that breached the air-gapped nature of the network.
@alperenozturk9235
@alperenozturk9235 15 күн бұрын
I believe there is still a classified part of HUMINT work on the background.
@ftffighter
@ftffighter 15 күн бұрын
I've always wondered if the high rate of the centerfuges caused vibrations that could be felt outside somehow and those vibrations were the transmission?
@Cumdown
@Cumdown 15 күн бұрын
​@@ftffighterwhat is the receiver in this case?
@nicknickels7951
@nicknickels7951 13 күн бұрын
😂 🆒 interesting...
@petertimowreef9085
@petertimowreef9085 15 күн бұрын
10:50 how the heck did the program contact it's creators if the facility's system was totally isolated? If it broadcasted a signal, how come the Iranians didn't pick up on it?
@CarlTSpeak
@CarlTSpeak 15 күн бұрын
It didn't. Airgapped. Was exfiltrated from site.
@petertimowreef9085
@petertimowreef9085 15 күн бұрын
@@CarlTSpeak Excuse my ignorance but I still don't understand. At 10:57 he says stuxnet "would send this map back to the programmers". What method of data transfer did stuxnet use to communicate that information?
@Arcomist
@Arcomist 2 күн бұрын
​@@petertimowreef9085 As I understand it, if a copy of a virus escaped the site with information (infected a device inside and got carried away to another with internet access) it will connect to the programers and then an updated virus could then again infect the facility
@petertimowreef9085
@petertimowreef9085 16 сағат бұрын
@@Arcomist Right, so the virus left the nuclear complex in a physical sense, on a thumb-drive or something?
@DerNiederlander
@DerNiederlander 14 күн бұрын
This man has like 1 million channels and is pumping out videos on all of them almost everyday. He is everywhere
@melchiel4413
@melchiel4413 15 күн бұрын
Much as there was once an age of pike and shot, we are now in the age of drones and hackers. It would be wise to be the first to adopt them skillfully.
@jaybee9269
@jaybee9269 15 күн бұрын
Cyber commands already exist.
@ljt3084
@ljt3084 15 күн бұрын
Except the CIA didn't use it wisely and aside from attacking a country the western powers always like to paint as an aggressor, Stuxnet threatened a lot of computer services globally including the British NHS at the time.
@kameronjones7139
@kameronjones7139 15 күн бұрын
​@@jaybee9269 yeah dude is a good 20-30 years behind
@dizefx
@dizefx 14 күн бұрын
Zero Days is a nice documentary about this. Some NSA whistleblowers say their part too, undercover ofc. Strongly recommend it.
@Mike-ls1uj
@Mike-ls1uj 15 күн бұрын
Low key reassurance in regards to thier current situation
@Venser420
@Venser420 15 күн бұрын
I live 45min from INL (Idaho National Labs) had zero clue they were involved in this operation. That is pretty neat, I'll have to let a friend of mine who works there know.
@jeremyroper7273
@jeremyroper7273 15 күн бұрын
INL was behind a lot of cyber research in the 2000s. Go on KZfaq and lookup INL diesel generator experiment
@notajetplane
@notajetplane 15 күн бұрын
Wow. I had no idea about any of this. Neat.
@Sam_Guevenne
@Sam_Guevenne 15 күн бұрын
Look up the virus known as Pegasus (It's very very scary"
@nolongerblocked6210
@nolongerblocked6210 15 күн бұрын
Everyone likes to think only China or Russia has high quality hackers, the truth is the US has the best hackers in the world(TOA)... to go along with the best military equipment in the world
@mill2712
@mill2712 15 күн бұрын
The reason we don't hear about it is because... 1. We aren't trying to mess with the common company or citizenry in those countries. 2. The best attacks are the ones they don't know about. 3. If those countries know they got hit, they aren't telling that they got hit.
@DanSoloha
@DanSoloha 15 күн бұрын
Our equipment is overpriced and over sophisticated - it relies too heavily on technology, which is highly prone to electronic warfare/ jamming, as seen in Ukraine Edit: some of our equipment, I should clarify; systems like HIMARS and Javelin, for example, have proven highly effective
@santman3200
@santman3200 15 күн бұрын
@@DanSoloha Ovepriced sure, over sophisticated fuck no. Literally non of the high end equipement has been given to ukraine so I don't know what you are yapping about with elecotrninc warfare.
@dianapennepacker6854
@dianapennepacker6854 15 күн бұрын
​@@DanSolohaThe things Russia has jammed only partially jammed it. A lot of them have back ups like interial navigation which has improved. Remember we give them hand me downs. Or could be taken out quickly when used with weapons the US has but Ukraine does not in great numbers. Like aircraft and harm missiles. Those bombs and shells were less accurate, but still much more accurate than dumb fire munitions.
@noahgray543
@noahgray543 15 күн бұрын
​@DanSoloha oh look, one of the "Reformers." We've been hearing this since the F-16 and it proved you guys wrong hard. Go play with rocks, luddite.
@disgruntledtoons
@disgruntledtoons Күн бұрын
One thing that was touched on really needs emphasis: The Iranian nuclear program managers had wisely adopted one of the most effective defenses against cyberattack: Their systems were not connected to the Internet, and it required what is effectively inside assistance to even begin to attack that system. Whenever I read about a security breach of any system, my first question is always, "Why was this connected to the Internet at all?" Many compromised systems did not require Internet connectivity in order to accomplish their official purposes.
@Solomon_animated
@Solomon_animated 15 күн бұрын
Darknet Diaries covered this one I think, due to it being about hacking and what not. Good episode.
@tonybrock5288
@tonybrock5288 11 күн бұрын
Simon you are a master of speech delivery and hats off to your deserved success! I have started noticing something that troubles me though... In the "early" days your speech was bright and crisp! These days I'm picking up something slightly more slurred. I pray that your health is good but if this is news to you please have it checked out.
@ftffighter
@ftffighter 15 күн бұрын
I've always wondered if the high rate of the centerfuges caused vibrations that could be felt outside somehow and those vibrations were the transmission?
@YTaccount11454
@YTaccount11454 12 күн бұрын
how can they update the virus if the facility and its infrastructure was airgapped from the internet? did the worm magically assemble a wifi chip also? it sounds like something was missing here. or was the facility not truly airgapped but configured to null route internet traffic thus being connected to the internet and not fully airgapped?
@theodorsonfors1391
@theodorsonfors1391 14 күн бұрын
I've seen a few videos about stuxnet and I can tell you this is by far the one with the most work put in. Great job researchers.
@fautedemieux21
@fautedemieux21 6 күн бұрын
If that's the case... you haven't seen enough.
@theodorsonfors1391
@theodorsonfors1391 6 күн бұрын
@@fautedemieux21 Do you have any suggestions?
@Kolor-kode
@Kolor-kode 15 күн бұрын
Wasn't just Stuxnet, a whole slew of malware based on the Tilded platform , include Duqu and the star of the show, Stuxnet.
@patron7924
@patron7924 15 күн бұрын
Love the glasses Simon 😎
@Reformed322
@Reformed322 14 күн бұрын
i would love to work with those guys some day. the equation group is such an awesome name too.
@Joshplaysguitar69
@Joshplaysguitar69 14 күн бұрын
Your voice has way too much reverb on it. Love your content!
@dat_asian_dude
@dat_asian_dude 15 күн бұрын
Check out Zero Days. It's a documentary style movie about Stuxnet. And there is also a book: Countdown to Zero Day
@aftbit
@aftbit 15 күн бұрын
11:00 I don't quite get that. If the network was airgapped, how would the virus exfiltrate information to the US or get updates?
@Pepesilvia267
@Pepesilvia267 13 күн бұрын
You can send data through power outlets or maybe use some piece of equipment to generate radio waves. I’ll bet the facility had phones or fax or something that wasn’t for the internet but did allow communication to the outside world. If you had something consistent like power line voltage or water pressure you could use changes in that as binary. Basically stuxnet could control some secondary system as communication if something simple like phone lines or RF wasn’t available. Heck let’s get crazy. It could hijack an exterior camera and watch for smoke signals sent by a spy elsewhere in the country and could hijack a lamp post to flicker on and off to transmit. The possibilities are endless if you are creative enough and the virus has control of enough systems.
@concadium
@concadium 3 күн бұрын
I highly recomment reading "To kill a centrifuge" by Langner, it is their version of the Stuxnet analysis and covers the whole operation in a lot of detail.
@irflashrex
@irflashrex 15 күн бұрын
Beware of the USB stick in the parking lot.
@Kneedragon1962
@Kneedragon1962 15 күн бұрын
"Destroyed" is a big word. It certainly slowed them down and broke a number of very expensive machines. It was at the time, about the most sophisticated cyber-weapon anybody had found and publicly released.
@klti0815
@klti0815 15 күн бұрын
There's a great documentary by Alex Gibney called "Zero Days" about it, that looks at it more as the story of discovery and reverse engineering what it actually does. This was a wild time blowing everyones minds about what is really out there. Also, te fact that they found and essentially burned 4 Windows zero days is wild, a no interaction Windows zero day is incredibly hard to find, and worth millions on the open market for these kind of things. Though it probably helped that Windows licensing deals for the military and the likes have included access to the source code for years.
@Thermalburn
@Thermalburn 2 күн бұрын
I'm curious how a network connection was established once stuxnet was installed., if the facility was air gapped. Even if it was I'm surprised none of the IT staff noticed a connection and traffic flowing outbound
@geemooney2229
@geemooney2229 6 күн бұрын
I could study this for years!
@serenity749
@serenity749 13 күн бұрын
I actually requested a deep dive into this on Simons reddit. I'm so happy someone took it up!!! I was thinking Casual Criminalist or Dark Shadows, but it actually makes more sense in Warographics. It is truly shocking to me how little people know about this, much less how under reported it was. I feel like cyber warfare took such a huge leap forward from this event, and I can only find a little content related to it. It's shocking. Scary. The future of cyber warfare is terrifying to me. Hope this video helps to spread awareness. I would have liked to hear this in a free format though. Still, awesome video. Great content!!!!!!!!!!!
@virkutisss3563
@virkutisss3563 14 күн бұрын
10:58 wait wait wait, how did this virus send the map of operations back us/israel if this plant was in isolation from world internet?
@techcafe0
@techcafe0 17 сағат бұрын
@11:00 If Natanz was air-gapped then how would it be possible for the worm to send or transmit maps or anything else back to the United States?
@mro6030
@mro6030 11 күн бұрын
There are some inconsistencies in what is being told here, specially the air gap argument and the program being able to communicate back with its creators. There is a 2016 documentary called Zero Days, produced by Alex Gibney that goes deep into Stuxnet, although it is interesting that the Dutch engineer is not mentioned in it.
@mohammedsaysrashid3587
@mohammedsaysrashid3587 15 күн бұрын
Nice introduction... and an informative work.......How many years required Iran population stepping back to the Medevil period ( under the Islamic Iran 🇮🇷 regime...that regime donated by CIA-1979 to its friendship Iranian people's)
@pedzsan
@pedzsan 13 күн бұрын
If the facility was air gapped, how did they get data and updates back and forth? Your explanation is critically flawed.
@HalfdanWinebench
@HalfdanWinebench 15 күн бұрын
Shadow brokers....a Sci Fi nerd reference to the Mass Effect games I believe 😀😃
@Btstaz
@Btstaz 9 күн бұрын
If it was air gapped and someone had to physically introduce Stuxnet , after the 11 min mark you talk about Stuxnet sending back facility design and layout as well as then being able to updated Stuexnet remotely. You can't have both an Air gapped system and remote update capabilities.
@jazdragen
@jazdragen 15 күн бұрын
Simonverse spy stories continue 🎉🎉🎉
@sprolyborn2554
@sprolyborn2554 13 күн бұрын
Hold the phone. How did stuxnet communicate with the outside and how did it receive instructions if Natanz was air gapped?
@olliec5564
@olliec5564 12 күн бұрын
Watch the video properly and you'll find out!
@matthew164
@matthew164 15 күн бұрын
Umm, how can it be updated remotely? Let alone get the data back If it was physically disconnected from the interwebs?
@BravoOne1
@BravoOne1 15 күн бұрын
A backdoor could've been installed along with the virus or the virus was programmed to create a backdoor
@evrythingis1
@evrythingis1 14 күн бұрын
Umm, you ever think it could get out the same way the virus got INTO the building ? Are you developmentally disabled?
@evrythingis1
@evrythingis1 14 күн бұрын
@@BravoOne1 What is the point of this bot comment!?
@OTbase
@OTbase 8 күн бұрын
The rotor speed attack doesn't damage the motors, it damages the rotors. Any digital masking of the rotor speed attack would have been foolish because rotors spinning out of whack were easily detected by ear.
@carlsaganlives6086
@carlsaganlives6086 Күн бұрын
2:50 - That's the facility? Landscaped, tree lined entrance? All part of the 'nothing going on here' subterfuge? Centrifuge under the subterfuge?
@OmegaDenz96
@OmegaDenz96 13 күн бұрын
Watch the movie "Zero Days" years ago, and definitely got intrigue about this one.
@penance.fracture
@penance.fracture 11 күн бұрын
how could stuxnet have been updated remotely from a facility with no initial internet access? some kind of unique secure tunnelling scheme?
@losbones
@losbones 14 күн бұрын
@warographics please do a video on the UC nuclear umbrella countries.
@bakibadjon544
@bakibadjon544 13 күн бұрын
how did stucksnet connect to outside world if its closed system
@JimAllen-Persona
@JimAllen-Persona 15 күн бұрын
The thing that concerns me is businesses drive to lower costs at any expense, making installations more vulnerable. Look at how those banks got hacked a few years ago… using cheap consumer grade perimeter security. I’m actually much more paranoid about internal penetrations than external. It’s the weakest link in a lot of corporate security… especially given the trend to work from home and allowing your corporate laptop access to your home network….especially people that don’t have their IOT devices on a separate subnet. You want cheap? You get cheap.
@karatecanine
@karatecanine 12 күн бұрын
So if the Iranian site was complete offline/disconnected/not hardwired to the internet...... How could it establish a remote connection ?
@mattr7274
@mattr7274 9 күн бұрын
Cool story. What took you so long. I heard about this 10 years ago. Very cool.
@j502nd
@j502nd 9 күн бұрын
Need clarification throughout the video you say the facility was air gapped but also that the virus was sending updates back to the US how that possible ?
@bigdog2024
@bigdog2024 10 күн бұрын
so the worm sends updates on the plant architecture back to the programmers from an AIR GAPPED facility with no internet? Only possible way is by infection of plant workers cell phones and even that is sketchy as phones would not be allowed inside and transmission of data by the worm to them would be difficult.
@realbenactually
@realbenactually 11 күн бұрын
How many channels do you have, man?
@YodaBSith
@YodaBSith 12 күн бұрын
Even after infection, how could they update the virus remotely when the place was air gapped?
@kareltjecompudevil
@kareltjecompudevil 15 күн бұрын
I am curious, how were they able to recieve the blueprint they created with the beacon and later update it when it was on an airgapped system? Did they add something in the pumps to send out data?
@evrythingis1
@evrythingis1 14 күн бұрын
If they got the virus into the system without using the internet, why would they need the internet to get it back out? Why are so many bots asking this senseless question!?
@KylerAntalek
@KylerAntalek 13 күн бұрын
That was the best video I’ve ever seen on KZfaq. Absolutely fascinating.
@30LayersOfKevlar
@30LayersOfKevlar 14 күн бұрын
How did the Stuxnet communicate from within the airgapped network?
@evrythingis1
@evrythingis1 14 күн бұрын
The same way they got it onto the air gapped network in the first place? Are you developmentally disabled or something?
@apexcrypto01
@apexcrypto01 15 күн бұрын
Honestly it's incredible this operation was pulled off. It's refreshing to see the US protrayed so competent. Fu*k anyone who was against this. This is truly bad ass.
@theforsakeen-9014
@theforsakeen-9014 15 күн бұрын
it got out of hand though when it infected thousands of other computers outside iran.
@bmxerkrantz
@bmxerkrantz 15 күн бұрын
imagine what is being done even more competently.... as in enough to not get caught...
@andersjjensen
@andersjjensen 15 күн бұрын
Uh, not having a fail safe against widespread "release" was not exactly competent. Imagine what would have happened if it had ended up in, say, a nuclear power plant, and found Siemens PLCs, and then blindly just treating what was connected to those PLCs as if they were centrifuges. PLCs don't have something like USB Discovery where you can see what's connected to them. They're just dumb "switch boxes" where you need to understand the wiring to be able to understand the code running on them. It was advanced, bold, risky and fairly competent. But I'd really like a video of the meeting where someone went "Uh... why the FUCK can this thing spread like wild fire WHILE NOT being capable of removing itself without a trance if it finds itself on Aunt Gerda's freaking laptop?!?"
@SeanZ1L
@SeanZ1L 15 күн бұрын
$1b cost for a 3-4 year delay in Iran’s nuclear capability, small bit of a waste of hard working taxpayer money if you ask me but i’m no expect in these matters, neither was the government it seems
@DOTvCROSS
@DOTvCROSS 15 күн бұрын
anyone who is already familiar with s-net, @13:33 he 'ACCLERATED' it, s-net slowed it down 🤣
@CheekyMenace
@CheekyMenace 15 күн бұрын
Anyone interested in Stuxnet, watch the documentary called Zero Days. Gives a very in-depth explanation.
@phooogle
@phooogle 11 күн бұрын
11:00 so how did the virus send a map back without any external connectivity?
@OTbase
@OTbase 8 күн бұрын
The recording and playback of legitimate process values does not take place in the rotor speed attack. It is only used in the first version of Stuxnet. The PLCs attacked in the rotor speed attack -- S7-315 -- don't even support this functionality.
The Rafah Invasion, Putin’s Nuclear Games and More
35:18
Warographics
Рет қаралды 206 М.
The Stuxnet Story: What REALLY happened at Natanz
37:38
OTbase
Рет қаралды 131 М.
Can You Draw The PERFECT Circle?
00:57
Stokes Twins
Рет қаралды 34 МЛН
ПЕЙ МОЛОКО КАК ФОКУСНИК
00:37
Masomka
Рет қаралды 1,7 МЛН
The SR-91 “Aurora”: The Plane that Doesn’t Exist…
22:15
Megaprojects
Рет қаралды 1 МЛН
The Uyghurs: The Genocide the World Forgot
32:20
Warographics
Рет қаралды 144 М.
The Art of War: Biological Warfare
30:18
Warographics
Рет қаралды 225 М.
A NEW Trace! The FULL MH370 Story, so Far..
56:06
Mentour Pilot
Рет қаралды 4 МЛН
What Would a Second US Civil War Really Look Like?
23:32
Warographics
Рет қаралды 1,5 МЛН
Russia's Turtle Tanks Are Evolving
10:36
The Armourer's Bench
Рет қаралды 445 М.
Sudan: the Proxy War the World is Ignoring
25:53
Warographics
Рет қаралды 565 М.
Can You Draw The PERFECT Circle?
00:57
Stokes Twins
Рет қаралды 34 МЛН