{"id":6907,"date":"2010-10-06T13:08:54","date_gmt":"2010-10-06T11:08:54","guid":{"rendered":"http:\/\/www.burks.de\/burksblog\/?p=6907"},"modified":"2010-10-06T13:09:02","modified_gmt":"2010-10-06T11:09:02","slug":"stuxnet-myrtus-or-myrtus","status":"publish","type":"post","link":"https:\/\/www.burks.de\/burksblog\/2010\/10\/06\/stuxnet-myrtus-or-myrtus","title":{"rendered":"Stuxnet Myrtus or MyRTUs?"},"content":{"rendered":"

Auf Cryptome<\/a> sind ein paar interessante Randbemerkungen \u00fcber „the media’s propaganda machine is alive and well“:<\/p>\n

According to<\/a> Markoff, „Several of the teams of computer security researchers who have been dissecting the software found a text string that suggests that the attackers named their project Myrtus… an allusion to the Hebrew word for Esther. The Book of Esther<\/a> tells the story of a Persian plot against the Jews, who attacked their enemies pre-emptively.“<\/p>\n

Really? Personally I’d be surprised if a crack team of Israeli software engineers were so sloppy that they relied on outdated rootkit technology (e.g. hooking the Nt*() calls used by Kernel32.LoadLibrary()<\/a> and using UPX<\/a> to pack code). Most of the Israeli developers I’ve met are pretty sharp. Just ask Erez Metula<\/a>.<\/i> <\/p>\n

\"image_pdf\"<\/a>\"image_print\"<\/a><\/div>
<\/div>