While origin unclear, Gauss indicates malware tool boom

10.08.2012
The computer security firm Kaspersky Lab announced this week that it had found a new cyber surveillance virus in the Middle East that is a descendent of the Stuxnet, Flame and Duqu malware.

But they are not calling it "Son of Stuxnet." Stuxnet is the computer worm widely believed to have been to attack Iran's nuclear centrifuges.

Dennis Fisher, , said the new malware, discovered in June, had been named Gauss, after the German mathematician Carl Friedrich Gauss.

"Gauss contains some of the same code as Flame," Fisher wrote. "But is markedly different in a number of respects, specifically in its ability to steal online banking credentials and has an encrypted payload that experts haven't yet been able to crack."

"[Gauss is] capable of stealing browser cookies and passwords, steal account information for social networks and IM applications, intercept online banking credentials for a handful of Middle Eastern banks as well as PayPal and Citibank and infect USB drives with a data-stealing module," reported.

By Friday, both Kaspersky and the Laboratory of Cryptography and System Security (CrySys) at the Budapest University of Technology and Economics had . But those may soon be of limited value.