Overview
Stuxnet targeted Siemens PLCs controlling uranium enrichment, changing rotor speeds beyond tolerance while feeding operators a replay of healthy data.\nIt spread via Windows Update-signed drivers and USB sticks air gaps could not block.\nIt is widely regarded as the first digital weapon to cause physical destruction, and its code lineage informed a decade of ICS research.
Indicators of Compromise
Signals that suggest this is present on a system.
- Unsigned or oddly-signed kernel drivers
- PLC logic cycling at impossible rates
- Unexpected Windows print-spooler peer-to-peer traffic