The Gauss malware described last week that targets Lebanese bank accounts still has one secret to divulge - the purpose of its “encrypted warhead” known as Godel. That’s the term used by researchers at Kaspersky, the computer security firm that described Gauss last week, for a part of the malware programmed to decrypt only when it lands on exactly the right computer system. What Godel does under those conditions is unknown, and today, Kaspersky laid out what it knows about Godel and asked for help determining its purpose.
[T]oday we are presenting all the available information about the payload in the hope that someone can find a solution and unlock its secrets. We are asking anyone interested in cryptology and mathematics to join us in solving the mystery and extracting the hidden payload.
Kaspersky says Gauss is related to government-sponsored cyberweapons Stuxnet and Flame, and the company’s researchers and some other experts believe Gauss was also created by a nation state. Godel can only be decrypted with a key built using information drawn from the computer it has infected, specifically information about programs installed on the system. Until someone figures out exactly what Godel’s looking for, it’s impossible to know what it will do when activated. Kaspersky’s researchers are considering the possibility that it is intended to attack SCADA - industrial control - systems, like those in use by the Iranian nuclear program disrupted by Stuxnet:
The resource section is big enough to contain a Stuxnet-like SCADA targeted attack code and all the precautions used by the authors indicate that the target is indeed high profile.
Here’s how a Twitter engineer says it will break in the coming weeks
One insider says the company’s current staffing isn’t able to sustain the platform.
Technology that lets us “speak” to our dead relatives has arrived. Are we ready?
Digital clones of the people we love could forever change how we grieve.
How to befriend a crow
I watched a bunch of crows on TikTok and now I'm trying to connect with some local birds.
Starlink signals can be reverse-engineered to work like GPS—whether SpaceX likes it or not
Elon said no thanks to using his mega-constellation for navigation. Researchers went ahead anyway.
Get the latest updates from
MIT Technology Review
Discover special offers, top stories, upcoming events, and more.