logo

Researchers find cyber-sabotage malware that may predate Stuxnet by five years

ID: f965398f-9eac-5343-ba5f-1e1eeb6e935b

STIX ID: report--f965398f-9eac-5343-ba5f-1e1eeb6e935b

Feed Name: The Register (Security)

Threat Score
78/100

Date Published: 2026-04-24

Date Updated: 2026-05-06

...
...

SentinelOne researchers presented analysis of a suspected cyber-sabotage malware named "fast16" that appears to deploy a driver (fast16.sys) to manipulate floating-point results and search for high-precision engineering and simulation tools (LS-DYNA 970, PKPM, MOHID). Based on code clues and compatibility limits (Windows XP single-core), the researchers estimate an origin around 2005 and suggest fast16 may be an early state-sponsored cyberweapon predating Stuxnet; they disclosed findings to affected vendors and highlighted potential real-world safety implications if targeted calculations were corrupted.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.