Move Over China, Iran May Have Been Source of Latest Cyberattacks on the U.S.
October 16, 2012 4:25 AM
It appears Iran may have reverse engineered U.S.-made malware and turn it back on the U.S. and its ally
When it comes to cyberaggression against the U.S., the
typical culprit is China
. But growing evidence suggests that a recent round of malware cyberattacks on the U.S. and its Middle Eastern ally Saudi Arabia may have been the work of Iran. Further, the evidence hints that the Iranians may have cleverly turned malware that the U.S. used on it in cybersabotage attempts back on the attackers.
I. Def. Secretary Implies Iran is Behind New Malware Attacks
The attacks in question revolved around a piece of malware
dubbed Shamoon or Disttrack
by security researchers. This particular malware -- which resembles the sophisticated Flame package the U.S.
used to spy on Iran
to attack its oil industry
hit the Saudi Arabian Oil Comp. (Aramco)
, the world's largest oil producer and privately held company.
The New York Times
acknowledge that there has been no formal announcement from Defense Secretary Leon E. Panetta that the attacks originated in Iran, but they say the evidence points to Tehran. One unnamed consultant is quoted as saying, "What the Iranians want to do now is make it clear they can disrupt our economy, just as we are disrupting theirs. And they are quite serious about it."
In a recent speech Sec. Panetta did seem to implicate Iran in a roundabout way, stating, "Iran... [has] undertaken a concerted effort to use cyberspace to its advantage."
DoD Secretary Leon Panetta implied that Iran was behind the latest cyberattacks.
[Image Source: The New York Times]
James A. Lewis, a senior fellow at the
Center for Strategic and International Studies
, comments in an
, "His speech laid the dots alongside each other without connecting them. Iran has discovered a new way to harass much sooner than expected, and the United States is ill-prepared to deal with it."
In addition to causing maintenance headaches for Aramco, the malware attack also lashed out at top U.S. financial institutions, creating difficulties -- in some cases -- for customers accessing accounts. Experts say this is possibly the first time Iran has used malware against its foes; Iran's past cyberwar efforts have focused on crude brute-force methods, such as distributed denial of service (DDoS) strikes.
II. Iran -- More Feisty Than Expected
The attacks show that Iran is proving a more savvy foe technologically than the U.S. anticipated. Much like Iran's
clever spoofing effort
down a U.S. spy drone in early Dec. 2011
, the new attacks show Iran's so-called Passive Defense Organization (PDO) indeed acting in a reactionary manner as its name implies.
In both cases, the U.S. appears to have initiated the first strike, but Iran proved savvy enough to offer a substantial response. That's a big victory for Gholamreza Jalali, a veteran of Iran's Revolutionary Guard, who now leads Irans PDO,
who vowed to
"to fight [Iran's] enemies" in "cyberspace and Internet warfare".
Iran has vowed to defend itself against U.S. cyberagression.
[Image Source: Interplay (cover art for
For the U.S. it represents the entrance into a shadowy and uncertain world in which the playing field is somewhat leveled between the strong and the weak in terms of traditional military. Long outlined by science fiction visionaries like William Gibson, this war is quite different from conventional warfare in that its most powerful weapons may be used without the general public ever knowing.
III. U.S. Sees Its Own Weapons Turned Against it
U.S. Department of Defense
officials reportedly disagreed recently on whether we should announced our cyber-weapons as a deterrent, similar to how America flaunts its nuclear arsenal. However, the prevailing sentiment is that cyberweapons are best kept secret, as there's no tactical gain to mentioning them. Comments one defense official speaking to
, "The countries who need to know we have [cyber-weapons] already know."
Sec. Panetta in his comments suggests that the U.S. needs to up its counter-offensive capabilities in cyberspace to protect itself and its allies. He opines, "We won’t succeed in preventing a cyber attack through improved defenses alone. If we detect an imminent threat of attack that will cause significant, physical destruction in the United States or kill American citizens, we need to have the option to take action against those who would attack us to defend this nation when directed by the president. For these kinds of scenarios, the department has developed that capability to conduct effective operations to counter threats to our national interests in cyberspace."
Some have said that
increased cooperating between the government and private sector firms
(e.g. in this case, the bank industry) in order to protect the market. But such efforts bring thorny issues of
privacy and market meddling
The idea of pre-emptive cyberstrikes is also controversial. That appears to be what the U.S. did against Iran, and it's now apparent that there may have been some reprecussions, when the foe proved less weak and susceptible than expected. The U.S. did
set back Tehran's economy and nuclear ambitions
. But now, as they say, the worm has turned, and it's seeing its own weapons reverse-engineered and turned back at it and its allies.
The U.S. has seen its own cyber-weapons turned against it. [Image Source: TechTear]
Of course such a phenomena isn't unique to the cyber realm, it's important to remember -- after all the U.S. funneled conventional weapons to Saddam Hussein and the Taliban only to see the weapons later turned against it in the hands of terrorists, insurgents, and hostile regimes.
The New York Times
Foreign Policy [blog]
"There is a single light of science, and to brighten it anywhere is to brighten it everywhere." -- Isaac Asimov
Iran Accuses U.S., Israel of Causing "Unwanted Slowness" on its Internet
October 4, 2012, 4:34 PM
Saudi Oil Giant Spills Details on How 30,000 of Its Systems Were Hacked
August 27, 2012, 2:32 PM
Oil Exporters Attacked by Malware Similar to That Used to Attack Iran
August 17, 2012, 12:30 PM
Following Defeat, Obama to Reportedly Push Cybersecurity Bill With Executive Orders
August 7, 2012, 7:26 PM
President Obama Scolds Businesses, Urges Passage of Cybersecurity Act
July 20, 2012, 5:16 PM
Google plans ultra-fast wireless Internet for Research Triangle Park, N.C.
August 12, 2016, 6:30 AM
Twitter Senior VP: "Diversity is Important, But We Can’t Lower the Bar"
November 9, 2015, 9:59 AM
CNN Resorts to Internet Censorship to Promote Clinton Over Senator Sanders
October 15, 2015, 2:47 PM
Breaking Bad: How to Crash Google's Chrome Browser With Just 8 Characters
September 23, 2015, 11:08 AM
Quick Note: Amazon UK Offers £10 Back on Any Order £50 or Over
August 3, 2015, 12:05 PM
Editorial: Reddit Allows Itself to be Hijacked as a Hate Platform For Racist Bigots
July 21, 2015, 6:32 PM
Most Popular Articles
Problems with Windows 10 – Update Now
October 15, 2016, 7:30 AM
Is Razer Blade Stealth Laptop For You?
October 16, 2016, 5:00 AM
Bluetooth Saves Lives
October 16, 2016, 7:05 AM
Innovative Neurotechnology in Sound Therapy Reduces High Blood Pressure and Migraines
October 16, 2016, 5:00 AM
Car Insurance - The Hidden Discriminatory Practise
October 18, 2016, 5:00 AM
Latest Blog Posts
Tips to Prevent Smartphones From Overheating:
Oct 22, 2016, 5:00 AM
Nasa Flies Drones at Nevada Airport
Oct 21, 2016, 8:21 AM
T-Mobile Data Problems
Oct 20, 2016, 10:17 AM
Annoying Apple Watch Problems and How to Fix Them
Oct 20, 2016, 5:00 AM
Your Mail May Soon Be Delivered By Robot
Oct 19, 2016, 9:34 AM
2018 Jeep Wrangler Prototype Sells At Junkyard
Oct 18, 2016, 5:00 AM
Samsung Shines with Gold Edition Tablet
Oct 17, 2016, 9:24 AM
Tesla Hints Mysterious Product Debut for October 17th
Oct 16, 2016, 10:14 AM
Samsung Galaxy Note 7 Phones on US flights
Oct 15, 2016, 5:00 AM
Comcast Fined $2.3 Million For Unconfirmed Services Charged To Customers
Oct 14, 2016, 5:00 AM
“American singer / songwriter “Bob Dylan is awarded 2016 Nobel Prize in Literature.
Oct 13, 2016, 10:33 AM
Battery Defect in Medical Device
Oct 12, 2016, 5:00 AM
IBM Bolsters Social Services Sector With Technology Grants
Oct 11, 2016, 5:00 AM
Scientists Sound Alarm on Climate but US Still Toys With Skepticism
Oct 10, 2016, 5:00 AM
IMEX America Trade Show
Oct 9, 2016, 10:00 AM
Phone Wars – Google VS Samsung Free Gifts on Purchase
Oct 6, 2016, 5:00 AM
Member of Parliament’s opposition car exploded in Tbilist capital of Georgia
Oct 5, 2016, 2:52 PM
US Government Cuts Cord On Internet Oversight
Oct 3, 2016, 10:34 AM
More Blog Posts
Copyright 2016 DailyTech LLC. -
Terms, Conditions & Privacy Information