Comments on: Stuxnet the Inscrutable http://www.welivesecurity.com/2010/10/13/stuxnet-the-inscrutable/ News, Views, and Insight from the ESET Security Community Mon, 03 Feb 2014 08:49:00 +0000 hourly 1 http://wordpress.org/?v=3.7 By: Niels Groeneveld http://www.welivesecurity.com/2010/10/13/stuxnet-the-inscrutable/#comment-2545 Thu, 14 Oct 2010 18:00:23 +0000 http://blog.eset.com/?p=5137#comment-2545 David,
"The Chinese themselves claim that the infection has been spread by US servers."
Rising software indeed made such claims. However, there does not seem any research which actually identifies any system based in the United States which is used by the StuxNet malware. Rising Software's own research does not identify such a system either (checked their research using Google Translate) ?

Some background on systems identified and Chinese writeups :

mypremierfutbol.com
todaysfutbol.com

78.111.169.146 Denmark
211.24.237.226 Malaysia
193.95.161.220 Ireland

Antiy: Report on the Stuxnet Worm Attack

Rising Antivirus: Stuxnet

(Page 3 for Domains)
(Comment on US server)
Kind regards,
Niels Groeneveld

]]>