logo

Fast16: Pre-Stuxnet malware that targeted precision engineering software

ID: 48c3b4dd-de36-53f8-86fd-ab87fe4c9082

STIX ID: report--48c3b4dd-de36-53f8-86fd-ab87fe4c9082

Feed Name: Security Affairs

Threat Score
82/100

Date Published: 2026-04-27

Date Updated: 2026-04-27

Author: Pierluigi Paganini

...
...

Fast16 is a 2005 sabotage malware analyzed by SentinelOne that used an embedded Lua virtual machine, a wormable modular loader (svcmgmt.exe), and a kernel driver (fast16.sys) to intercept filesystem operations and apply rule-based floating-point patches to precision engineering and simulation software; the report attributes the tooling to early U.S. cyber operations and highlights its strategic goal of silently corrupting scientific and engineering outputs rather than simple espionage.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.