Stuxnet Mitigation Update

The DHS Industrial Control System (ICS) CERT has published an updated version of the advisory on mitigation techniques for the Stuxnet malware on their Control System Security Program web page. They have essentially added a single piece of new information to the advisory that I reported upon last week.

The new bit of information is:

“NOTE: The SysClean tool [Siemens Link - PJC] removes multiple malware components (including the malicious DLL) and ICS-CERT has independently verified that the SIMATIC Security Update restores the affected DLL file necessary for the STEP 7 software to run.”

Still no new information on the capabilities of Stuxnet. The Siemens Stuxnet mitigation page was last updated on August 4th.