Researchers find link between spying programs

Experts say recently uncovered Flame shares software code with Stuxnet virus that targeted Iran's nuclear programme.

    Researchers find link between spying programs
    Computers compromised by Flame have been found in Lebanon, the Palestinian territories and Hungary

    Two leading computer security firms have linked some of the software code in the powerful Flame virus to the Stuxnet cyber weapon, which was widely believed to have been used by the US and Israel to attack Iran's nuclear programme.

    Eugene Kaspersky, chief executive of Moscow-based Kaspersky Lab, which uncovered the Flame virus last month, said on Monday his researchers had since found that part of the Flame program code is nearly identical to code found in a 2009 version of Stuxnet.

    Later in the day, the largest security firm, the US-based Symantec Corp, said it had confirmed that some source code had been shared.

    The new research could bolster the belief of many security experts that Stuxnet was part of a US-led cyber program still active in the Middle East and perhaps other parts of the world.

    Kaspersky Lab had said Flame was developed with a different set of tools than Stuxnet, though it said its analysis was just beginning and would take many months.

    Flame is the most complex computer spying program ever discovered and appeared to be aimed at government and energy-industry offices in Iran, Israel, the Palestinian territories and Sudan.

    It has the capacity to steal or alter electronic documents. Flame has 20 times as much code as Stuxnet and hijacked Microsoft's process for automatic updates in order to install itself.

    Although neither Kaspersky nor Symantec said who they thought built Flame, news organisations, including Reuters news agency and The New York Times, have reported the US and Israel were behind Stuxnet - which was uncovered in 2010 after it damaged centrifuges used to enrich uranium at a facility in Natanz, Iran.

    US silent on viruses

    Instead of issuing denials, authorities in Washington recently launched investigations into leaks about the highly classified project.

    The White House declined to comment.

    On Stuxnet and Flame, "there were two different teams working in collaboration", said Kaspersky.

    Flame is a highly sophisticated computer virus that  disguises itself as common business software. It was deployed at least five years ago and can eavesdrop on conversations on the computers it infects and steal data.

    Security experts have suspected links among Flame, Stuxnet and Duqu - another piece of malicious software that was discovered last year - but Kaspersky Lab was the first to say it found hard evidence.

    Late on Monday, Liam O Murchu, Symantec research manager, agreed, using his company's name for the newest virus, Flamer.

    "Symantec Security Response confirms Flamer and Stuxnet share some of its source code," O Murchu wrote, adding that the analysis would continue.

    If the US is proven to be a force behind Flame, it would confirm the country that invented the Internet is involved in cyber espionage - something for which it has criticised China, Russia and other nations.

    A Pentagon report last year that outlined the still-evolving US cyber strategy said economic espionage could prove the greatest threat to long-term US interests, pointing to thefts of industrial and defence secrets via internet spyware.

    Stuxnet was discovered in 2010 and has been closely scrutinised by the world's smartest cyber sleuths.

    Yet Flame remained hidden until last month, when a UN agency asked Kaspersky Lab to look for a virus that Iran said had sabotaged its computers, deleting valuable data.

    SOURCE: Agencies


    How different voting systems work around the world

    How different voting systems work around the world

    Nearly two billion voters in 52 countries around the world will head to the polls this year to elect their leaders.

    How Moscow lost Riyadh in 1938

    How Moscow lost Riyadh in 1938

    Russian-Saudi relations could be very different today, if Stalin hadn't killed the Soviet ambassador to Saudi Arabia.

    The peace games: Dreaming big for South Sudan's youth

    The peace games: Dreaming big for South Sudan's youth

    A relatively new independence and fresh waves of conflict inspire a South Sudanese refugee to build antiwar video games.