Stuxnet and Flame

Depiction of a compartmented "Behind the Green Door" US secure communications center (Photo credit: Wikipedia)

Cyberwarfare is getting interesting, and not just because of what it means for "traditional" international relations.  Increasingly, it looks like anyone can run a serious cyber-espionage operation.  How long until these tools are in the hands of more non-state actors?  When do they become a major tool in domestic politics?  IntelNews reviews the situation.  Excerpts:

Stuxnet, which caused unprecedented waves of panic among Iranian cybersecurity experts, was 500 kilobytes in size. Flame is over 20 megabytes in size, consisting of 650,000 lines of code; it is so complex that it is expected to take programming analysts around a decade to fully comprehend. The two are different, of course. Stuxnet was an infrastructure-sabotaging malware, which destroyed hundreds —maybe even thousands—of Iranian nuclear centrifuges. Flame, on the other hand, appears to be an espionage tool: it aims to surreptitiously collect information from infected systems.

Both, of course, were directed against Iran.  But they don't end there.

...there is no little doubt that Flame’s handlers have collected massive amounts of intelligence for at least two years. The program was apparently able to record conversations conducted over Skype; take desktop snapshots every 15 seconds or so; and collect usernames and passwords, among other capabilities. And all that while circumventing even the strongest antivirus software. But there is also the other side of the equation: as in the case of Stuxnet, Flame is now effectively freeware. Anyone can ostensibly access it, copy it, modify it, and re-launch it against his or her target of choice...

Cover via Amazon

Over 100 Israeli systems are already reported to have been infected by Flame, as well as systems in several other countries in the region.  The United States?  I have found no conclusive reports one way or another.  And even then, we'd have to distinguish between government and corporate and other systems.  But the "freeware" aspect intrigues me.  How much trouble would it be for the next PFC Manning to insert a version of Flame into SIPRNet?  Or something more restricted?  I can't help but wonder how many cyberactivsts are pouring over the code.

Are we approaching the land of "No More Secrets"?  Is this The Transparent Society discussed by Brin?  Not really, if only for the reason that those who uncover secrets may not be able to understand what they have, or may choose not to share it with the world.  But it does raise the prospect that while the NSA plugs away at monitoring everything we do, there might be a lot more states and non-state actors doing the same to them.  How will that change the game?

Comment: Who authored computer virus that ‘dwarfs Stuxnet’? « intelNews.org

Related articles

• Sworn Declaration of Whistleblower William Binney on NSA Domestic Surveillance Capabilities

  ---

• Experts: U.S. Cyber War on Iran Has Just Begun

  ---

• Confirmed: Flame created by US and Israel to slow Iranian nuke program

  ---

• Development timeline key to linking Stuxnet, Flame malware

  ---

Paging Jason Bourne

Image via Wikipedia

Every so often the curtain parts and one sees the world is a lot more like a spy movie than most people want to believe. Memos have leaked from the the CIA describing a "false flag" operation by the Israelis, directed against Iran, in which an anti-Iranian terrorist group was told they were being sponsored by the Americans. In this world, you can never be entirely sure who you are working for, or with. And once discovered (during W's administration), what was the reaction?

The CIA memos of the incident have been "blue bordered," meaning that they were circulated to senior levels of the broader U.S. intelligence community as well as senior State Department officials.

What has become crystal clear, however, is the level of anger among senior intelligence officials about Israel's actions. "This was stupid and dangerous," the intelligence official who first told me about the operation said. "Israel is supposed to be working with us, not against us. If they want to shed blood, it would help a lot if it was their blood and not ours. You know, they're supposed to be a strategic asset. Well guess what? There are a lot of people now, important people, who just don't think that's true."

False Flag - By Mark Perry | Foreign Policy

Related articles

• Washington Post Plumbs the Depths of the U.S. Intelligence Community (pogoblog.typepad.com)