Iran nuclear plants hit by virus playing AC/DC, website says

DUBAI, United Arab Emirates — Iran’s nuclear facilities have suffered a cyber attack that shut down computers and played music from the rock band AC/DC, the F-Secure Security Labs website says.

A new worm targeted Iran’s nuclear program, closing down the “automation network” at the Natanz and Fordo facilities, the Internet security site reported, citing an email it said was sent by a scientist inside Iran’s Atomic Energy Organization.

The virus also prompted several of the computers on site to play the song “Thunderstruck” by AC/DC at full volume in the middle of the night, according to the e-mail, part of which is published in English on the website.

ADVERTISEMENT
0 seconds of 0 secondsVolume 0%
Press shift question mark to access a list of keyboard shortcuts
00:00
00:00
00:00
 

F-Secure Security Labs, which is linked to F-Secure, the Finnish maker of security and cloud software, said that while it was unable to verify the details of the attack described, it had confirmed that the scientist who reported them was sending and receiving the e-mails from within Iran’s Atomic Energy Organization.

Iran’s nuclear program and oil facilities have been subject to a succession of cyber attacks that the Foreign Ministry said in May were launched by hostile governments as part of a broader “soft war.” Iran accuses the United States and Israel of trying to sabotage its technological progress. Both countries say Iran’s nuclear activities may have military intent, an allegation that Iran denies.

Mikko Hypponen, chief security officer at F-Secure Security Labs and the person involved in the correspondence, said he received three emails on July 22 from an individual with an aeoi.org.ir e-mail address, receiving replies after he responded. After researching the person’s name on the Internet, Hypponen said he found “plenty of nuclear science papers and articles published by someone with this name.”

“I can’t confirm that the person was who he said he was. And I can’t confirm any of the things he said actually happened,” Hypponen wrote in reply to emailed questions. “But I can confirm I was emailing with someone who had access to an aeoi.org.ir address.”

Iran has called on the United Nations to condemn organized cyber attacks against nations, the head of Iran’s Information Technology Organization, Ali Hakim Javadi, said Wednesday, according to a report by the state-run news channel Press TV. Significant investment is needed for the creation of malware viruses such as Stuxnet or Flame, which previously targeted Iran, indicating that they were not produced by individuals, the Iranian official said.

AC/DC has played “high voltage rock ‘n’ roll” since the band was formed in 1973 in Australia, according to the band’s website. The group’s songs were among the loud music played to detainees at the Guantanamo Bay prison facility in preparation for interrogations, the Associated Press reported in October 2009, citing the National Security Archive in Washington.

An attack where the infected PCs start playing AC/DC isn’t that likely “unless the attacker really wants the victim to know they are hit,” Hypponen said.

F-Secure Security Labs is involved in analyzing viruses, spyware and spam attacks, according to its website.

bc-iran-cyber

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Local News

Jennifer Humelo, right, hugs Art Cass outside of Full Life Care Snohomish County on Wednesday, May 28, 2025 in Everett, Washington. (Olivia Vanni / The Herald)
‘I’ll lose everything’: Snohomish County’s only adult day health center to close

Full Life Care in Everett, which supports adults with disabilities, will shut its doors July 19 due to state funding challenges.

(City of Everett)
Everett’s possible new stadium has a possible price tag

City staff said a stadium could be built for $82 million, lower than previous estimates. Bonds and private investment would pay for most of it.

The Edmonds City Council gathers to discuss annexing into South County Fire on Tuesday, Dec. 3, 2024 in Edmonds, Washington. (Olivia Vanni / The Herald)
Community group presents vision for Edmonds’ fiscal future

Members from Keep Edmonds Vibrant suggested the council focus on revenue generation and a levy lid lift to address its budget crisis.

The age of bridge 503 that spans Swamp Creek can be seen in its timber supports and metal pipes on Wednesday, May 15, 2024, in Lynnwood, Washington. The bridge is set to be replaced by the county in 2025. (Ryan Berry / The Herald)
Snohomish County report: 10 bridges set for repairs, replacement

An annual report the county released May 22 details the condition of local bridges and future maintenance they may require.

People listen as the Marysville School Board votes to close an elementary and a middle school in the 2025-26 school year while reconfiguring the district’s elementary schools to a K-6 model on Wednesday, Jan. 22, 2025 in Marysville, Washington. (Olivia Vanni / The Herald)
Marysville schools audit shows some improvement

Even though the district still faces serious financial problems, the findings are a positive change over last year, auditors said.

Outside of the Madrona School on Monday, Aug. 26, 2024 in Edmonds, Washington. (Olivia Vanni / The Herald)
Sewer district notifies Edmonds schools of intent to sue

The letter of intent alleges the school district has failed to address long-standing “water pollution issues” at Madrona K-8 School.

Cars drive along Cathcart Way next to the site of the proposed Eastview Village development that borders Little Cedars Elementary on Wednesday, May 7, 2025 in unincorporated Snohomish, Washington. (Olivia Vanni / The Herald)
Former engineer: Snohomish County rushed plans for Eastview development

David Irwin cited red flags from the developers. After he resigned, the county approved the development that’s now stalled with an appeal

Edie Carroll trims plants at Baker's Acres Nursery during Sorticulture on Friday, June 6, 2025 in Everett, Washington. (Olivia Vanni / The Herald)
Sorticulture, Everett’s garden festival, is in full swing

The festival will go through Sunday evening and has over 120 local and regional vendors.

Students attending Camp Killoqua next week pose with Olivia Park Elementary staff on Friday, June 6 near Everett. Top, from left: Stacy Goody, Cecilia Stewart and Lynne Peters. Bottom, from left: Shaker Alfaly, Jenna Alfaly and Diana Peralta. (Will Geschke / The Herald)
A school needed chaperones for an outdoor camp. Everett cops stepped up.

An Olivia Park Elementary trip to Camp Killoqua would have been canceled if not for four police officers who will help chaperone.

Cascadia College Earth and Environmental Sciences Professor Midori Sakura looks in the surrounding trees for wildlife at the North Creek Wetlands on Wednesday, June 4, 2025 in Bothell, Washington. (Olivia Vanni / The Herald)
Cascadia College ecology students teach about the importance of wetlands

To wrap up the term, students took family and friends on a guided tour of the North Creek wetlands.

Everett’s minimum wage goes up on July 1. Here’s what to know.

Voters approved the increase as part of a ballot measure in the November election.

Logo for news use featuring Snohomish County, Washington. 220118
State declares drought emergency for parts of Snohomish County

Everett and the southwest part of the county are still under a drought advisory, but city Public Works say water outlooks are good.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.