How the mighty have fallen — the notorious Stuxnet malware source code has been replicated and posted on GitHub for all to see
Recreating a prolific malware using a mix of publicly available decompiled binaries and AI?
A pseudonymous GitHub account has published what it claims to be a reconstruction of the Stuxnet malware that targeted and damaged Iranian uranium-enrichment centrifuges. The account uses the name "Stuxnet" which was originally coined by Symantec after the malware was discovered. However, the source code for Stuxnet has never been made public, and the authenticity of this reconstruction remains unverified.
Some users suspect it to be an AI-generated replication of the original binary behavior. The malicious software that caused physical destruction is often more harmful than data-stealing or manipulating software. The repository was discovered via a Show HN submission and quickly gained attention from mainstream media outlets. The researchers behind the reconstruction have stated that it is a faithful recreation built from decompiled binaries, which were first obtained from Belarusian firm VirusBlokAda in June 2010.
This is not the first time similar code has been published online; researchers have previously released decompilations of the malware. However, this particular reconstruction is unique in that it explicitly states its purpose is for educational purposes and is designed to work on Windows XP and Windows 7. For those interested in testing the code, a virtual machine is recommended due to Stuxnet's ability to cause physical damage to hardware.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
