- Category
- State · Attributed to a state or working for one.
- Origin
- Unknown
- Sponsor
- State-sponsored, Equation Group (NSA), CIA and Unit 8200
- Motivation
- Information theft and espionage; Sabotage and destruction
- Seen
- 2007
- Sources
- 4 sources carry it
- Identifier
- GINC-APT-0564 · operation-olympic-games
What it is
The events have been described in detail in the 2015 book Countdown to Zero Day and the 2016 documentary Zero Days. The piece of crucial information that was missing from both sources, how the malware was actually brought inside the facility, was documented in an investigative report in 2019. (The New York Times) From his first months in office, President Obama secretly ordered increasingly sophisticated attacks on the computer systems that run Iran’s main nuclear enrichment facilities, significantly expanding America’s first sustained use of cyberweapons, according to participants in the program. Mr. Obama decided to accelerate the attacks — begun in the Bush administration and code-named Olympic Games — even after an element of the program accidentally became public in the summer of 2010 because of a programming error that allowed it to escape Iran’s Natanz plant and sent it around the world on the Internet. Computer security experts who began studying the worm, which had been developed by the United States and Israel, gave it a name: Stuxnet.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- Other names
- GOSSIPGIRL
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
- ETDA / ThaiCERTno origin
Targets
- Countries
- Iran
- Sectors
- Energy
Tools
The tools and malware families the sources tie to it.
- Duqu
- Flame
- Gauss
- Miniflame
- Stuxnet
Sources
- ETDA Threat Group Card apt.etda.or.th