Computer Virus used as Ersatz Military Strike

Bushehr Nuclear Facility, Iran (2002). Image Source: Keep It Trill.

Ars Technica is reporting (here) via the Jerusalem Post (here) that Iranian nuclear development has been set back by at least two years by a targeted virus attack.

Damage from the Stuxnet virus has apparently set back the Iranian nuclear program by as much as two years, according to a German security expert talking to the Jerusalem Post. This makes the virus as effective as a military strike—but without loss of life or risk of full-blown war.

This comes amid claims that the virus is continuing to infect Iranian systems and disrupt the Iranian nuclear effort, and the news from IAEA last month that Iran had suspended work at its nuclear production facilities, likely as a result of the virus.

Speaking to the Post, an expert identifed only as "Langer" (we believe the Post likely means Stuxnet expert Ralph Langner, but have not had confirmation at the time of writing) said that due to poor Iranian IT security expertise, the only effective way the country would be able to rid itself of the virus would be through discarding all infected machines. He said that, further, centrifuges would need to be replaced at Iran's Natanz facility, as might a turbine at Bushehr. Centrifuges operating at between 807Hz and 1210Hz were believed to be a specific target of the virus.

Ars Technica later confirmed that the source was Langner. For Ralph Langner's blog, go here. There is another report on Stuxnet malware here.