StuxnetMalware
- w32.stuxnet
Stuxnet was the first publicly reported malware to specifically target industrial control systems devices. Stuxnet is a large and complex malware that utilized multiple behaviors, including numerous zero-day vulnerabilities, a sophisticated Windows rootkit, and network infection routines. Stuxnet was discovered in 2010, with some components being used as early as November 2008.From MITRE ATT&CK
Last reported 8 days ago, by Rapid74 reports
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1059.005Visual Basic
“Or maybe it’s a detective slinging one-liners like: “I’ll create a GUI interface using Visual Basic, see if I can track an IP address” (thank you for that gem, CSI: NY).”
- T1684Social Engineering
“This method significantly reduces the risk of detection and failure, as it does not rely on preemptive social engineering.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
4 reports, newest first · the exact sentence from each-
Rapid7 Intelligence Wins the 2026 Péter Szőr Award for Outstanding Research“One memory came straight back when I heard about the award: going through Stuxnet together.”
-
Predators for Hire: Commercial Surveillance Vendors Overview“The emergence of this need was reinforced by some of the first cyber operation revelations, notably Stuxnet in 2010 and Snowden's disclosures in 2013, which drew the attention of many states to the strategic value of cyber tools for political surveillance and consolidating power.”
-
ICS Security Conference 2026“At the outset, he noted that 2025 marked 15 years since the discovery of Stuxnet and 10 years since the Ukraine power outage incidents.”
-
What Hollywood Movies Get Right (and Wrong) About Hacking“And real-world malware can also cause physical changes portrayed by the scene (when malware turns off the fan), as we’ve seen with Stuxnet destroying centrifuges in Iran's nuclear program.”
Indicators in its reports
named in the reports above- gov[.]ukin 1 report
- surveillancewatch[.]ioin 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.