Stark US Warning Over Risk Of Cyber Attacks

[David_B]

Cyber attacks on energy companies in the Persian Gulf raise fears of
further assaults that could cause panic and destruction, the US has warned.

The attacks, which have been described as a "pre-9/11 moment", used a
virus called Shamoon which can spread through computer networks and
overwrite files.

Saudi Arabia's state oil company, Aramco, had to replace 30,000
computers after crucial system files were replaced with an image of a
burning US flag.

The Qatari natural gas producer RasGas was also targeted.
A former US official, speaking on condition of anonymity because the
investigation into the attacks is classified as secret, said the country
believes Iranian hackers are to blame.

The US Defence Secretary Leon Panetta publicly acknowledged the attacks
for the first time, although he did not make a direct link to Iran.
He said: "These attacks mark a significant escalation of the cyber
threat. They have renewed concerns about still more destructive
scenarios that could unfold.

"We know of specific instances where intruders have successfully gained
access to these control systems.

"We also know they are seeking to create advanced tools to attack these
systems and cause panic and destruction, and even the loss of life."

The US is investing more than \$3bn a year in online security to guard
against cyber attacks.

http://uk.news.yahoo.com/stark-us-wa...105402944.html

[Virus Guy]

David_B wrote:

> The attacks, which have been described as a "pre-9/11 moment", used
> a virus called Shamoon which can spread through computer networks
> and overwrite files.

Probably doesn't function correctly under win-98.

The method it uses to over-write the mbr probably doesn't work on a
FAT32 file system.

http://www.securelist.com/en/blog/20...etails_Part_II

=================
The main Shamoon module has a resource PKCS7:113 that maintains an
executable which is saved to disk as %WINDIR%\System32\NETINIT.EXE and
this program poses a module to communicate with CNC.
=================

I can find absolutely no mention anywhere on the net as to how the file
"netinit.exe" is placed and then executed on a comprimised system...

.............

Why does David_B cross-post to alt.politics.scorched-earth?

Why does he not include either alt.comp.virus or alt.comp.anti-virus in
what is obviously a viral-focused subject? Why does he instead post
these to alt.comp.privacy?

[David_B]

Virus Guy wrote:
> David_B wrote:
>
>> The attacks, which have been described as a "pre-9/11 moment", used
>> a virus called Shamoon which can spread through computer networks
>> and overwrite files.
>
[....]

> Why does David_B cross-post to alt.politics.scorched-earth?

It's a group which I took over some years ago, VG. Nothing sinister! :-)

> Why does he not include either alt.comp.virus or alt.comp.anti-virus in
> what is obviously a viral-focused subject? Why does he instead post
> these to alt.comp.privacy?

I wasn't aware that I'd personally posted to 'alt.comp.privacy'! ;-)

*

There's more on this subject, here:-

http://www.computerworld.com/s/artic...ity_2012-10-12

[Dustin]

Virus Guy <Virus@Guy.com> wrote in news:50781FA5.2DD9E74A@Guy.com:

> David_B wrote:
>
>> The attacks, which have been described as a "pre-9/11 moment", used
>> a virus called Shamoon which can spread through computer networks
>> and overwrite files.
>
> Probably doesn't function correctly under win-98.
>
> The method it uses to over-write the mbr probably doesn't work on a
> FAT32 file system.

OS file system doesn't matter. Trashing an mbr is the same methodology.

> I can find absolutely no mention anywhere on the net as to how the
> file "netinit.exe" is placed and then executed on a comprimised
> system...

I doubt any researcher would provide very specific details at this
time...Wouldn't be prudent.

> Why does David_B cross-post to alt.politics.scorched-earth?

So I'll see it.

> Why does he not include either alt.comp.virus or alt.comp.anti-virus
> in what is obviously a viral-focused subject? Why does he instead
> post these to alt.comp.privacy?

Because he, like yourself, is an idiot.




--
There ain't no rest for the wicked. Money don't grow on trees. I got
bills to pay. I got mouths to feed. Ain't nothing in this world for
free. Oh No. I can't slow down, I can't hold back though you know I wish
I could. Oh no there ain't no rest for the wicked, until we close our
eyes for good.

[David_B]

G. Morgan wrote:
> David_B wrote:
>
>> Cyber attacks on energy companies in the Persian Gulf raise fears of
>> further assaults that could cause panic and destruction, the US has warned.
>>
>> The attacks, which have been described as a "pre-9/11 moment", used a
>> virus called Shamoon which can spread through computer networks and
>> overwrite files.
>
> This is really easy...
>
> *Don't hook up your infrastructure to the public Internet!*
>
> *Don't allow employees to carry data storage devices in the secure area*


I see that you really do know your stuff, G. Morgan! ;-)

Have a great weekend!

[Bear]

Dustin <bughunter.dustin@gmail.com> wrote in
news:XnsA0EAB79075319HHI2948AJD832@no:
>
> Because he, like yourself, is an idiot.

Only SuperDustin is clever! <SIGH>

Jax
--
Bear Bottoms
http://bearware.info

[Dustin]

Bear <removebear.bottoms1@gmail.com> wrote in
news:XnsA0EEF206CB412bearbottoms1gmail.AC@130.225. 254.104:

> Dustin <bughunter.dustin@gmail.com> wrote in
> news:XnsA0EAB79075319HHI2948AJD832@no:
>>
>> Because he, like yourself, is an idiot.
>
> Only SuperDustin is clever! <SIGH>

Jax,

Compared to you; a monkey could be considered clever. What value do you
contribute here exactly?


--
There ain't no rest for the wicked. Money don't grow on trees. I got bills
to pay. I got mouths to feed. Ain't nothing in this world for free. Oh No.
I can't slow down, I can't hold back though you know I wish I could. Oh no
there ain't no rest for the wicked, until we close our eyes for good.