Iran nuclear plants hit by virus playing AC/DC, website says

DUBAI, United Arab Emirates — Iran’s nuclear facilities have suffered a cyber attack that shut down computers and played music from the rock band AC/DC, the F-Secure Security Labs website says.

A new worm targeted Iran’s nuclear program, closing down the “automation network” at the Natanz and Fordo facilities, the Internet security site reported, citing an email it said was sent by a scientist inside Iran’s Atomic Energy Organization.

The virus also prompted several of the computers on site to play the song “Thunderstruck” by AC/DC at full volume in the middle of the night, according to the e-mail, part of which is published in English on the website.

F-Secure Security Labs, which is linked to F-Secure, the Finnish maker of security and cloud software, said that while it was unable to verify the details of the attack described, it had confirmed that the scientist who reported them was sending and receiving the e-mails from within Iran’s Atomic Energy Organization.

Iran’s nuclear program and oil facilities have been subject to a succession of cyber attacks that the Foreign Ministry said in May were launched by hostile governments as part of a broader “soft war.” Iran accuses the United States and Israel of trying to sabotage its technological progress. Both countries say Iran’s nuclear activities may have military intent, an allegation that Iran denies.

Mikko Hypponen, chief security officer at F-Secure Security Labs and the person involved in the correspondence, said he received three emails on July 22 from an individual with an aeoi.org.ir e-mail address, receiving replies after he responded. After researching the person’s name on the Internet, Hypponen said he found “plenty of nuclear science papers and articles published by someone with this name.”

“I can’t confirm that the person was who he said he was. And I can’t confirm any of the things he said actually happened,” Hypponen wrote in reply to emailed questions. “But I can confirm I was emailing with someone who had access to an aeoi.org.ir address.”

Iran has called on the United Nations to condemn organized cyber attacks against nations, the head of Iran’s Information Technology Organization, Ali Hakim Javadi, said Wednesday, according to a report by the state-run news channel Press TV. Significant investment is needed for the creation of malware viruses such as Stuxnet or Flame, which previously targeted Iran, indicating that they were not produced by individuals, the Iranian official said.

AC/DC has played “high voltage rock ‘n’ roll” since the band was formed in 1973 in Australia, according to the band’s website. The group’s songs were among the loud music played to detainees at the Guantanamo Bay prison facility in preparation for interrogations, the Associated Press reported in October 2009, citing the National Security Archive in Washington.

An attack where the infected PCs start playing AC/DC isn’t that likely “unless the attacker really wants the victim to know they are hit,” Hypponen said.

F-Secure Security Labs is involved in analyzing viruses, spyware and spam attacks, according to its website.

bc-iran-cyber

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Local News

Regional Director Nicole Smith-Mathews talks about the new mobile opioid treatment clinic on Tuesday, July 29, 2025 in Monroe, Washington. (Olivia Vanni / The Herald)
New Snohomish County mobile opioid care unit showcased

The clinic, based in Gold Bar, will provide treatment to rural areas where options are limited.

The Washington State Criminal Justice Training Commission (WSCJTC) graduation of Basic Law Enforcement Academy (BLEA) Class 915 on Tuesday, July 29, 2025 in Arlington, Washington. This is the first class to complete training at the agency’s new Northwest Regional Campus in Arlington. (Olivia Vanni / The Herald)
First class graduates from Arlington’s police academy

The ceremony celebrated 27 new police officers, many who will work in Snohomish County.

Outside of the Madrona School on Monday, Aug. 26, 2024 in Edmonds, Washington. (Olivia Vanni / The Herald)
Olympic View Water and Sewer District sues Edmonds School District

The Olympic View Water and Sewer District filed a citizen… Continue reading

Everett
Everett police investigate ‘complicated’ pedestrian fatality

Police impounded a vehicle believed to be connected with the collision Sunday in south Everett. No charges have been filed.

Hugo, 6, walks through one of the entrance gates of the new Clark Park Off Leash Dog Area as owner Erica Weir follows behind on Tuesday, July 29, 2025 in Everett, Washington. (Olivia Vanni / The Herald)
Everett opens new dog playground in Clark Park

The off-leash area opened after years of planning and the controversial removal of a historic gazebo.

A no trespassing sign threatens prosecution at the site of Mother Nature’s Window Park along 55th Drive NE on Friday, Dec. 30, 2022, in Marysville, Washington. The patch of woods is overgrown, but there are plans to open the land back to the public after it is renovated. (Ryan Berry / The Herald)
Work begins to reopen a Marysville park for the first time in 25 years

Closed in the mid-1990s, Mother Nature’s Window is planned to open in 2026.

Lake Stevens Sewer District wastewater treatment plant. (Lake Stevens Sewer District)
Lake Stevens appeals sewer district assumption ruling

In June, a judge ruled the city cannot assume the district eight years earlier than originally planned.

Marysville recruit Brian Donaldson, holds onto his helmet as he drags a 5-inch line 200 feet in Snohomish County’s first fire training academy run through an obstacle course at the South Snohomish Fire & Rescue training ground on Monday, March 26, 2018 in Everett, Wa. (Andy Bronson / The Herald)
Voters approving fire and EMS levy lifts in Snohomish County

Initial returns showed measures passing in Marysville, North County Fire and Snohomish County Fire District No. 4.

From left, Carson Sanderson, Brian Travis and Arun Sharma
Frontrunners emerge in Northshore school board primary

Six candidates for three seats will move on to the Nov. 4 general election.

Top, from left: Amber Cantu, Gary Kemp, Dan Perkins. Bottom, from left: R.J. Whitlow, David Garrett.
Marysville council race too close to call

Fifth-grade teacher Dan Perkins took an early lead, with Amber Cantu and R.J. Whitlow trailing behind him.

Escamilla leading in Lynnwood, Position 3 race too close to call

Derica Escamilla and Dio Boucsieguez led for Position 1. Bryce Owings was in front for Position 3, with one vote separating Josh Binda and Tyler Hall.

Top, from left: Bill Wheeler, Erica Weir and Mason Rutledge. Bottom, from left: Sam Hem, Steven Sullivan.
Everett primary races in Districts 1 and 4 too close to call

In District 2, incumbent Paula Rhyne and her challenger, Ryan Crowther, cruised to spots in the November general election.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.