Stuxnet
Software · ATTACK:ics:S0603
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:ics:S0603",
"title": "Stuxnet",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0603",
"snapshot": "ics-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--088f1d6e-0783-47c6-9923-9c79b2af43d4",
"external_id": "S0603",
"domain": "ics",
"created": "2020-12-14T17:34:58.457Z",
"modified": "2026-04-24T02:36:25.135Z",
"version": "1.5",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "W32.Stuxnet"
},
{
"source_name": "CISA ICS Advisory ICSA-10-272-01",
"url": "https://us-cert.cisa.gov/ics/advisories/ICSA-10-272-01"
},
{
"source_name": "ESET Stuxnet Under the Microscope",
"url": "https://web-assets.esetstatic.com/wls/2012/11/Stuxnet_Under_the_Microscope.pdf"
},
{
"source_name": "Nicolas Falliere, Liam O Murchu, Eric Chien February 2011",
"url": "https://docs.broadcom.com/doc/security-response-w32-stuxnet-dossier-11-en"
},
{
"source_name": "Langer Stuxnet",
"url": "https://www.langner.com/wp-content/uploads/2017/03/to-kill-a-centrifuge.pdf"
}
]
}Explicit source assertions (25)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:ics:S0603 → uses → ATTACK:ics:T0849
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0e29f62d-4ffc-47ec-9623-72f874fbe905
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0888
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1d35c947-447f-4693-9ab0-32dff56e664e
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T1694.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2445124d-1fc9-49ad-8715-96053f39d717
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0877
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--28afd84d-a53e-4b2f-9bee-133f7da6982a
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0801
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2fd13fc0-e3f0-4099-ab20-d19ba6bcd4e0
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0867
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--327916f7-fe5d-4858-adeb-f72f74c60c25
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0834
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3d005ed8-77d3-4fed-9dd5-7e39ba8cb50a
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0836
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--50b3247a-ea71-455e-b299-f00666c05146
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0874
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--53a54e4a-2b38-4b0c-8f60-252a68767443
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0843
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7c893581-c847-495a-aa93-9d98c516e1ae
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0847
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--82b20c35-88c6-49aa-8241-a59512b17b74
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011 · Langer StuxnetATTACK:ics:S0603 → uses → ATTACK:ics:T1701.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--82c3a26d-0bb9-49f1-8586-e15ce5e67df7
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0863
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8a06c15b-b7e5-4374-9265-8d9020e126cd
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0873.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--aa444531-fa05-4bb4-a23e-8ac133781131
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0869
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bc383819-2e40-49b4-bea9-95eb5d418877
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0885
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bcece7ce-91b5-40b3-b87a-25cab3600e5c
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0866
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--be532c78-daf5-431b-adae-ab11af395513
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0831
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c6520346-fe47-44ce-af75-d99004ac2977
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0889
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cb38425c-646d-4bc8-bdea-e6cc630c3034
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0821
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ccae6e5d-8a9e-4bab-ae77-26a2bd722f67
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0832
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e257913e-40ba-4a05-ba97-0c3175c966b5
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011 · Langer StuxnetATTACK:ics:S0603 → uses → ATTACK:ics:T0886
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--eaeb3c8d-9d91-4eb0-8049-5cb99e141026
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0835
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f0c81c9f-2fb7-4e7d-98ed-c75e3be7d962
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:ics:S0603 → uses → ATTACK:ics:T0851
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f130282b-f681-455f-966b-55829842be92
Langer StuxnetATTACK:ics:S0603 → uses → ATTACK:ics:T0842
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f29ecf69-1753-44bb-9b80-1025f49cadda
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011