The Stars virus is a computer virus which infects computers running Microsoft Windows. It was named and discovered by Iranian authorities in April 2011. Iran claimed it was used as a tool to commit espionage. [1] [2] Western researchers believes that it is probably the same virus as the Duqu, part of the Stuxnet attack on Iran.
The Stars virus was studied only in an Iranian laboratory, with other cybersecurity organizations not having access to samples, and therefore not being able to compare it to Duqu, Stuxnet, or any other known malware. [1] [2] Foreign computer experts say they have seen no evidence of the virus, and some even doubt its actual existence. [3] [4] Iran is claiming Stars to be harmful for computer systems. It is said to inflict minor damage in the initial stage and might be mistaken for executable files of governmental organizations. [1] [2]
This is the second attack claimed by Iran after the Stuxnet, a computer worm discovered in July 2010 that targeted industrial software and equipment. [2] [5]
Researchers came to believe that the Stars virus found by Iranian computer specialists was the Duqu virus. The Duqu virus keylogger was embedded in a JPEG file. Since most of the file was taken by the keylogger only a portion of the image remained.[ clarification needed ] It turned out to be an image taken by the Hubble telescope showing a cluster of stars, the aftermath of two galaxies colliding. Symantec, Kaspersky and CrySyS researchers came to believe Duqu and Stars were the same virus. [6] [7]