What Is Duqu?

If you've heard of Stuxnet, you've probably heard of Duqu. If you have yet to hear of either one, we highly suggest you research those two viruses because they're essential to the history of computer security. Duqu is a malicious computer virus designed to gather intelligence data from entities such as industrial control manufacturers to launch a future attack on an industrial control facility. Internet security specialists uncovered Duqu in October 2011, declaring its code nearly identical to that of an early computer worm, Stuxnet, which targeted five Iranian organizations, including a uranium enrichment operation in June 2010. The main difference between the two viruses is that Duqu has been found on systems running Windows 7, meaning it could compromise computers not just in Iran but across the globe (and plenty of people who use Windows 7 aren't even in Iran). Duqu has been linked to a series of coordinated attacks on industrial control systems that were believed to have been carried out by the same group. These systems are responsible for power plants, water treatment facilities, and other large industrial sites. The possibility of a rogue state or non-state actor attempting to bring these systems offline has significant implications for public safety. Duqu is a computer virus that looks for specific information on the infected machine, such as passwords and credentials. It then sends this information to its creators so they can access the system without being detected. The virus uses command and control computers to pass information back and forth between itself and its creators. It also uses keystroke logging and data mining to steal the data it seeks. Such is the latest in a line of computer viruses that can self-replicate, infecting computers and then spreading to other computers. It was first discovered in September 2011. Such is the second generation of this family of malware. It is more sophisticated than its predecessor and uses different methods to achieve its goals.