Stuxnet

malware OpenTrojan Threat Intelligence

Industrial control system malware

Source Attribution

Origin
MITRE
Source
Public reporting (2010)
Verified
2026-08-26T16:07:01.550Z
Confidence
high

Source: Public reporting (2010) · Verified: 2026-08-26T16:07:01.550Z · Confidence: high

Security Timeline

  • discovered Stuxnet first observed
  • updated Encyclopedia entry reviewed (Phase 45C)

Quick Answer

Stuxnet is the landmark destructive malware targeting Siemens SCADA systems, revealed in 2010. (attributes recorded from Public reporting (2010)).

Definition

Stuxnet is the landmark destructive malware targeting Siemens SCADA systems, revealed in 2010.

Overview

Stuxnet is the landmark destructive malware targeting Siemens SCADA systems, revealed in 2010.

Behavior

  • Targets SCADA
  • multiple zero-days
  • self-propagating

First Seen

2010-01

Target

Industrial control system malware

Malware Intelligence

Family: Stuxnet

Techniques: T1480, T1055

Targets: Industrial control system malware

Behavior:
  • Targets SCADA
  • multiple zero-days
  • self-propagating

References

Have a follow-up question?

Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.

Ask AI about this Start an investigation

Start Investigation

Move from reading to investigating Stuxnet. The workspace is a structured analysis surface — not a chat — organised as:

  1. Question — what do you need to know about Stuxnet?
  2. Evidence — assertions mapped to verifiable references.
  3. Timeline — events in chronological order.
  4. Related Entities — CVE, threat actor, campaign, malware links.
  5. Sources — NVD, CISA KEV, MITRE ATT&CK, vendor advisories.
  6. Notes — your own observations and working hypotheses.

AI assistance is limited to summarising, explaining, and suggesting related evidence. AI never completes your investigation, modifies entity relationships, or generates facts — all published analysis stays human-reviewed.

Start Investigation Open Workspace

Recommended Tools

Every tool runs passively or locally — inputs are never stored and no target is scanned.Start an investigation on this entity →