Duqu is a sophisticated Trojan that seems to have been written by the same people who created the infamous Stuxnet worm.

Experts compared the similarities and found three of interest:

  • The installer exploits zero-day Windows kernel vulnerabilities.
  • Components are signed with stolen digital keys.
  • Duqu and Stuxnet are both highly targeted and related to the nuclear program of Iran.

For more information read this paper by Boldizsár Bencsáth, Gábor Pék, Levente Buttyán and Márk Félegyházi and the report by Symantec.

history | show excerpt | excerpt history