From TechRadar · · 1m 40s
Stuxnet source code leaked on GitHub
A mysterious researcher posted what they claim is a reconstruction of the infamous malware that sabotaged Iranian nuclear centrifuges.
In brief
A mysterious researcher posted what they claim is a reconstruction of the infamous malware that sabotaged Iranian nuclear centrifuges. The published code is likely an AI-generated replica, not the original source, and experts are skeptical of its authenticity. Originally reported by TechRadar.
Stuxnet code surfaces on GitHub
A pseudonymous GitHub account published what it claims is a reconstruction of Stuxnet, the worm that sabotaged Iranian uranium-enrichment centrifuges and caused physical destruction.
The original source never leaked
The actual Stuxnet source code written by its creators has never been publicly released. The GitHub repository is a reconstruction from decompiled binaries that have circulated since 2010.
Symantec named it Stuxnet
The malware's creators likely never called it Stuxnet. Symantec coined the name weeks after discovery, originally calling it W32.Temphid. The irony is that authentic code wouldn't reference Stuxnet in registry keys.
Not the first Stuxnet replica
Malware researchers have published readable C-language code replicating Stuxnet before. Amr Thabet and Christian Roggia released decompilations in 2010 and 2012, spawning multiple forked repositories.
Developers suspect AI generation
Users on the GitHub thread where the code was shared branded it AI slop and a fake that mixes existing repositories. The code is unverified and untested.
Designed for Windows XP and 7
The repository claims the code was reproduced for educational purposes and only works on Windows XP and Windows 7. Researchers recommend testing it in a virtual machine given Stuxnet's ability to damage hardware.
A warning about rogue AI
The incident highlights what could happen if an AI agent operated without proper instructions or safeguards. Stuxnet's ability to cause physical destruction makes this concern especially urgent.
In short
The published code is likely an AI-generated replica, not the original source, and experts are skeptical of its authenticity.
