A GitHub user has published a reconstructed version of Stuxnet, rebuilding the malware that sabotaged Iran's nuclear centrifuges from over a decade of public reverse-engineering research, and framing it as a research and defensive-training resource.
Read the full story: A Researcher Just Put a Full Stuxnet Rebuild on GitHub →
Transcript
A GitHub user just rebuilt Stuxnet, the malware that physically wrecked Iran's uranium centrifuges back in 2010. It's the first cyberweapon ever confirmed to cause real physical damage, and now a fuller, working reconstruction is public. The repo includes the rootkit drivers that hid its files, the hook that intercepted traffic between Siemens' Step7 software and the PLCs, and the payload that spun centrifuge motors past their limits while feeding operators fake, normal readings.
Fifty three commits to put it back together. Here's the good news. The original zero days are patched, the stolen certificates are revoked, it won't run as is. But the entire playbook, hiding inside a PLC and lying to the humans watching it, is now sitting in a public repo for anyone to study.