Malware originating in Iran as a Zero-Day. Developed by the National Security Agency Exploited a windows vulnerability. USBs were dropped around the facility, and would spread to industrial control units, to increase the speed of centrifuge spin slowly so that the machines would break. Was discovered when the malware spread to citizen’s computers.

Diamond Model of Intrusion Analysis

  • Victim: Siemens industrial control system
  • Infrastructure: Used USBs
  • Adversaries: Siemens, China, India, US, Israel
  • Capabilities: Powerful malware