Critical infrastructure threat as new malware is identified

Triton virus has similarities to Stuxnet worm employed against Iran

A US cyber security firm has warned countries to urgently upgrade the IT security of their critical infrastructure after identifying a new form of malware comparable to the 2010 Stuxnet virus which targeted Iran’s nuclear facilities.

Mandiant wrote in a blog post published on Thursday that the virus, known as Triton, had been used against an unidentified critical infrastructure organisation. It declined to name the country or the industrial sector that was targeted but said it had “moderate confidence that the actor is sponsored by a nation state”.

“We don’t know if it’s Russia, Iran or North Korea,” said John Hultquist, head of the cyber espionage unit at Fire Eye, Mandiant’s parent company. “All three of them have been [active] in the critical infrastructure space.”......................

ft.com Click here for full access of entire article in English