Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulations

Symantec and other vendors analyzed a Lua-based sabotage malware called "fast16" that was crafted to hook into LS-DYNA and AUTODYN simulation software and selectively tamper with high-explosive/uranium-compression simulation runs; the framework includes 101 hook rules across multiple software versions, appears highly specialized and methodical, is linked to files from the Shadow Brokers/Equation Group leak, and likely represents early nation-state industrial sabotage activity predating Stuxnet.