Stuxnet Paper Revision

The Stuxnet analysis “Stuxnet under the Microscope” we published a few weeks ago has been updated, as promised, to include some information about the recently-patched win32k.sys vulnerability (MS10-073, or CVE-2010-2743), and just a little about the Task Scheduler issue that hasn't been patched yet.

Randy Abrams has filled a hole in Babelfish's functionality by blogging his translation from the classical Geek of the paper to what passes for English in the US. Well, it's all Geek to me. [Insert your own favourite Trojan pun here.]

I'm afraid the paper now runs to a hefty 72 pages…

David Harley CITP FBCS CISSP
ESET Senior Research Fellow