logo

Researchers find cyber-sabotage malware that may predate Stuxnet by five years

ID: 5a6a76a6-744e-57b8-9d10-87135d0a655c

STIX ID: report--5a6a76a6-744e-57b8-9d10-87135d0a655c

Feed Name: The Register (Security)

Threat Score
70/100

Date Published: 2026-04-24

Date Updated: 2026-04-26

Author: Simon Sharwood

...
...

SentinelOne researchers disclosed a discovered malware family dubbed "fast16" that installs a driver (fast16.sys) designed to subtly alter floating-point outputs and seek precision calculation tools used in civil engineering, physics, and simulation suites (notably LS-DYNA 970, PKPM, and MOHID). Analysis suggests the tool dates to around 2005, targets legacy single-core Windows XP systems, and appears to be a covert sabotage-oriented cyberweapon possibly of nation-state origin that predates Stuxnet.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.