Stuxnet
Software · ATTACK:enterprise:S0603
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0603",
"title": "Stuxnet",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0603",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--088f1d6e-0783-47c6-9923-9c79b2af43d4",
"external_id": "S0603",
"domain": "enterprise",
"created": "2020-12-14T17:34:58.457Z",
"modified": "2026-04-24T02:36:25.135Z",
"version": "1.5",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "W32.Stuxnet"
},
{
"source_name": "CISA ICS Advisory ICSA-10-272-01",
"url": "https://us-cert.cisa.gov/ics/advisories/ICSA-10-272-01"
},
{
"source_name": "ESET Stuxnet Under the Microscope",
"url": "https://web-assets.esetstatic.com/wls/2012/11/Stuxnet_Under_the_Microscope.pdf"
},
{
"source_name": "Nicolas Falliere, Liam O Murchu, Eric Chien February 2011",
"url": "https://docs.broadcom.com/doc/security-response-w32-stuxnet-dossier-11-en"
},
{
"source_name": "Langer Stuxnet",
"url": "https://www.langner.com/wp-content/uploads/2017/03/to-kill-a-centrifuge.pdf"
}
]
}Explicit source assertions (44)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--02a353b7-7b15-4068-82eb-7385c1684021
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--061cfa7a-df09-40cc-bed5-35407b425cb8
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1132.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--130f35b1-17d5-45bf-9000-2040adbcc56c
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1560.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--160d9be2-967e-4116-9c75-44b5b0a8927b
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1070.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--237283ca-5cae-48c3-9a5a-3dc17725cd5f
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1129
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--261e7ed2-9252-40ea-9f06-abc45797c004
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1047
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--29552a61-61fe-4265-9468-e53318bd388c
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2f11e661-a5a0-4420-b97e-b080fc4fa441
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1543.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--382e04c1-aa23-4e52-a254-06e45ca8edfd
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3921c748-c29e-4c2f-b5cb-bcc7c0237219
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3e153f3f-26aa-4ff6-8192-095b30e94bae
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1134.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3ee76373-418f-43af-adb5-3c0fcb7f080e
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1210
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4f2bd19b-f0f4-4946-a7a5-4947be3346b1
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--544b4f94-a1b6-49cd-adf8-c0b6499e8acd
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1091
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5fccce48-b648-40e4-a58a-18f068189daf
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1480
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6a92b1de-a2f2-4e68-aabc-a5568614f18c
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6f950d42-13f2-48e0-9ecf-3c48d7562460
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1070
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--726e2014-a0d6-4ed3-959b-2ad647884f5c
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1055.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7307a870-2d74-4e46-9ba0-8fb83d598cfb
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--73fa4b5d-e75f-4050-b7aa-d003b3a31bf3
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1014
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7c85cd06-5b92-4b5d-acf5-fdd12a73b289
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--81763def-b0ec-4938-832d-cffb382bb4a8
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8363c29c-b5f4-4b0b-8396-52628c773430
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--85b5e45d-247e-4c8b-a991-95700e4d81d9
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1087.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8baa00da-64da-4acb-831e-2c001399394a
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1120
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--96640478-b6a5-40b6-8928-b1c0cc5ad3ef
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1685
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--98cffbad-1538-44fa-b81e-49bad15e4e5c
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1068
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9b7b3fc7-0151-4848-9b66-774eaf72561f
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1078.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9c8be5c7-5f72-4c60-aaf7-f1f62eaf91f2
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9e0d38b0-f7c6-432e-8f7d-470e07a6d303
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1087.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b65d643e-ff0b-4cf1-8c3f-7d31f39f2efb
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1021.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c6c086b1-65b6-45ba-ba86-7ccd7f2849d3
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c88502ec-f0f7-4b86-865b-8dc0a21b9580
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ce1c1257-f244-4844-8aa5-16992430f9ef
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1553.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d0644c51-e386-4dd9-99c1-e9f601fc398b
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1135
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d25f8661-bb36-479b-b5ca-ff21abc656b8
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1078.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d45ff9eb-aca1-4bda-b5a8-fd4034ac8f1e
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d70530d5-b733-4b5a-9589-9f6a16670ed2
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1570
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--da63f54a-e6a4-414b-9d54-404b0a63d2f6
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1053.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dc19b319-1c17-45f0-9881-9bf2ac8a2611
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1021
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--df3c4e4d-9766-4673-ab1f-2210ecc50764
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1090.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e3549420-15ec-4747-9988-7dfdbdb1e7d7
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1080
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e665a033-2893-43f5-ab5f-ba4c91636aba
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011ATTACK:enterprise:S0603 → uses → ATTACK:enterprise:T1505.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e8379082-d4fe-4bc9-8ba6-63299045eb73
Nicolas Falliere, Liam O Murchu, Eric Chien February 2011