A Cyber "Warhead" With an Unknown Target
The Gauss malware described last week that targets Lebanese bank accounts still has one secret to divulge - the purpose of its “encrypted warhead” known as Godel. That’s the term used by researchers at Kaspersky, the computer security firm that described Gauss last week, for a part of the malware programmed to decrypt only when it lands on exactly the right computer system. What Godel does under those conditions is unknown, and today, Kaspersky laid out what it knows about Godel and asked for help determining its purpose.

[T]oday we are presenting all the available information about the payload in the hope that someone can find a solution and unlock its secrets. We are asking anyone interested in cryptology and mathematics to join us in solving the mystery and extracting the hidden payload.
Kaspersky says Gauss is related to government-sponsored cyberweapons Stuxnet and Flame, and the company’s researchers and some other experts believe Gauss was also created by a nation state. Godel can only be decrypted with a key built using information drawn from the computer it has infected, specifically information about programs installed on the system. Until someone figures out exactly what Godel’s looking for, it’s impossible to know what it will do when activated. Kaspersky’s researchers are considering the possibility that it is intended to attack SCADA - industrial control - systems, like those in use by the Iranian nuclear program disrupted by Stuxnet:
The resource section is big enough to contain a Stuxnet-like SCADA targeted attack code and all the precautions used by the authors indicate that the target is indeed high profile.
Keep Reading
Most Popular
DeepMind’s cofounder: Generative AI is just a phase. What’s next is interactive AI.
“This is a profound moment in the history of technology,” says Mustafa Suleyman.
What to know about this autumn’s covid vaccines
New variants will pose a challenge, but early signs suggest the shots will still boost antibody responses.
Human-plus-AI solutions mitigate security threats
With the right human oversight, emerging technologies like artificial intelligence can help keep business and customer data secure
Next slide, please: A brief history of the corporate presentation
From million-dollar slide shows to Steve Jobs’s introduction of the iPhone, a bit of show business never hurt plain old business.
Stay connected
Get the latest updates from
MIT Technology Review
Discover special offers, top stories, upcoming events, and more.