Is Serco behind Stuxnet?

Here is a article by symantec.com and there findings. Seems Stuxnet sets up a P2P network to update itself.

Other network activity
The worm contacts the following URLs through port 80, which are the worm's C&C servers, to test Internet connectivity:

www.mypremierfutbol.com
www.todaysfutbol.com

www.symantec.com...

So I wanted to find out more about these two sites?

IP Location: Ireland Dublin Anner International
IP Address: 193.95.161.220
Reverse IP: 2 websites use this address. (examples: mypremierfutbol.com todaysfutbol.com)

And its ran by?

person: Andy Ruane
address: Anner International
address: 50 Upper Mount Street
address: Dublin 2
address: Ireland

whois.domaintools.com...

So who is Andy Ruane?

Andy Ruane
Commercial Projects Director at Serco Education and Children's Services

uk.linkedin.com...

What does Serco Education and Children's Services have to do with www.mypremierfutbol.com and
www.todaysfutbol.com which are both gambling websites? That does not sound like something kids should be doing. Who is this Serco Education and Children's Services and what do they do?

There web site seems to have a weird side menu for a site related to kids.

Serco
Education and Children's Services

BPO
Consulting
Defence
Education
National Programmes
Local Authority Services
Ofsted Inspections
Leadership Development
Software for Schools
Further and Higher Education
Environmental Services
Facilities Management
Health
Home Affairs
ICT
Knowledge Services
Leisure
Local Government
Nuclear
Science
Transportation
Welfare to Work

www.serco.com...

So what do you think about this connection?

reply to post by JBA2848


I think it stinks to high heaven, and begs and screams conspiracy.... I also think you do execellent work, and I am impressed...S & F's for you on this... Can't wait to hear how all this you've uncovered plays out....thanks

Heres what Serco also does besides running a futbol gambling site tied to children services.

Nuclear
Serco is one of the world's most experienced companies in nuclear safety, technology and management.

Our technical consulting services business focuses on enabling the safe and uninterrupted operation of nuclear reactors and the management of complex nuclear facilities, helping customers get more from their capital intensive and safety critical plant. Some of the world's leading experts in nuclear technology work on the Serco team developing many of today's nuclear safety standards.

The company has qualified people who have worked on nearly every civil nuclear site in the UK, and many of its 400 plus professionals, engineers and scientists are internationally recognised for their expertise.

We have provided independent advice to the Royal Navy on the safety of their nuclear submarines for over 45 years, providing safety documentation, independent peer review, risk management, human factors and occupational safety support.
We support the operation of over 20 nuclear reactors, and serve as the lead nuclear safety advisor to Westinghouse, designer of the AP1000 nuclear reactor currently under assessment for the UK's new civil nuclear programme.
Serco manages the UK Atomic Weapons Establishment (AWE) as part of a consortium with Lockheed Martin and Jacobs. AWE is one of the most advanced research, design and production facilities in the world, developing the sophisticated materials, quantum physics and computer modelling vital to the safe and effective maintenance of the UK's nuclear deterrent. AWE experts also play a leading role in nuclear non-proliferation and international nuclear security.
We are partnered with Manchester and Battelle to manage the National Nuclear Laboratory (NNL) the leading nuclear technology services provider in the UK. NNL has expertise across the full range of nuclear technology, including waste management, nuclear safety and non-proliferation, materials and corrosion and plant inspection.

www.serco.com...

Heres some more of what they do besides futbol gambling sites tied to children services.

Defence
Serco supports the armed forces of a number of countries around the world, including the United Kingdom, United States, Germany and Australia, working across land, sea, air, nuclear and space environments. Our mission is to deliver affordable defence capability and support to the armed forces. We work in partnership with our customers in government and the private sector to address the cost of defence, both financial and social, delivering affordable change and assured operational support services.

In the UK and Europe:

Serco manages the UK Atomic Weapons Establishment (AWE) as part of a consortium with Lockheed Martin and Jacobs. AWE is one of the most advanced research, design and production facilities in the world, developing the sophisticated materials, quantum physics and computer modelling vital to the safe and effective maintenance of the UK's nuclear deterrent. AWE experts also play a leading role in nuclear non-proliferation and international nuclear security.

We enable the Royal Navy to move in and out of port at HM Naval Bases Faslane, Portsmouth and Devonport for operational deployment and training exercises. Managing a fleet of over 100 vessels, we operate tugs and pilot boats, provide stores, liquid and munitions transportation and provide passenger transfer services to and from ships for officers and crew. We also operate Woolwich Ferry and the Royal Navy worldwide laundry service.

We provide facilities and information systems support to the MoD's Defence Science and Technology Laboratory (Dstl), the UK government's leading defence research establishment, including a £400m programme to rationalise the Dstl estate. We also provide facilities management services to the Defence Estates in support of the UK military presence in Gibraltar.

Serco provides extensive engineering and maintenance support to UK military aviation, including to the Fleet Air Arm and Royal Air Force, working on over 16 military aircraft types, in addition to the logistical support services at RAF bases across the country, including Brize Norton, Lyneham and High Wycombe, the Headquarters of Air Command.

Our space and security specialists provide spacecraft operation and in-theatre support to the Skynet 5 secure military satellite communications network; we maintain the UK's anti-ballistic missile warning system at RAF Fylingdales and support the UK Air Surveillance and Control System (ASACS); Serco also supports the intelligence mission of the MoD and US Department of Defence at RAF Menwith Hill.

Our technical consulting business has provided independent advice to the Royal Navy on the safety of their nuclear submarines for over 45 years, providing safety documentation, independent peer review, risk management, human factors and occupational safety support.

Serco enables the training of national security personnel through its services at the Defence Academy of the United Kingdom, the MoD's world class institute responsible for educating the military leaders of tomorrow; we train all of the RAF's helicopter pilots at the advanced training facility at RAF Benson; and we manage the Cabinet Office's Emergency Planning College, the government's training centre for crisis management and emergency planning.

www.serco.com...

reply to post by JBA2848


Wow!!!! This should be the most popular thread on the planet.... Where is everybody??? Amazing!!!!

reply to post by JBA2848


S&F that is excellent work my freind.


Are they using the childrens services as a cover?
I was reading this morning...

What do you think?
stevenjohnhibbs.wordpress.com...

reply to post by JBA2848


Wow!!!! This should be the most popular thread on the planet.... Where is everybody??? Amazing!!!!

Serco Communications | Reston, VA
Awarded $88M Logistics Contract w/ Navy - www.serco-na.com... 4:59 PM Sep 17th


twitter.com...

Nice detective work!!

S+F.

However the Andy Ruane you are looking at could very be the same Andy Ruane who invented The Lyrics Game. He's from Dublin and may be looking to enter into the realms of Football as a means to make money.

The virus itself is considered low risk too which flies in the face of everything the MSM are telling us.

Good work. I'll be popping in to see how this progresses.

-m0r

Originally posted by freetree64
reply to post by JBA2848

 

Wow!!!! This should be the most popular thread on the planet.... Where is everybody??? Amazing!!!!

Stuxnet is a P2P botnet it doesn't need command and control servers to work.

en.wikipedia.org...

It also has the capability to upgrade via peer to peer, allowing it to be updated after the initial command and control server was disabled.[16]



Mod Edit: Please Review the Following Link: Courtesy Is Mandatory
Mod Note: Profanity/Circumvention Of Censors – Please Review This Link.

Serco has lots of jobs in Fort Meade too.
hostedjobs.openhire.com... %20Technology&levelid1=19071


They have a special security agreement that allows a UK based company to handle classified US projects.

and
washington.bizjournals.com...

Technology and management services contractor Serco Inc. has named former National Security Agency and FBI executive Maureen Baginski to the position of national security adviser and vice president of its intelligence business.

Read more: Serco hires new vice president of intelligence - Washington Business Journal

Okay, Serco seems to be everywhere - from immigration prisons in Oz
antonyloewenstein.com...
to North America.

So, I checked Anner International to find any link between them and Serco and found only one.

Seems Anner International is a media firm
www.4rfv.co.uk...

And they have a program called "Bespoke"
www.4rfv.co.uk...

And Serco is a customer of that program. Now Serco uses it for schools.
www.prlog.org...

So, I'm guessing this is how the schools got tied to gambling advertising or visa versa ... but, I still think there are pieces of the puzzle missing. Specifically, this Serco school training program and how it's tied to Serco various SECURITY type businesses.

Here's a thread on SERCO www.abovetopsecret.com...

Thread claims Serco is the most dangerous corporation you've never heard of.

reply to post by Returners

Lots of Stuxnet news lately: Kaspersky and Symantec indicated that the worm used not one, but four zero-day Windows exploits. Ralph Langner concluded that the PLC manipulations he observes indicate an attack against a specific physical process. And Symantic has also found that the worm uses a peer-to-peer communications mechanism for software upgrades, as well as contact with a command and control server. Details below.

findingsfromthefield.com...

Seems they do have a comand and control that works by p2p which connected to the futbol gambling sites that I searched. At least thats what the experts say Kaspersky and Symantec.

Hes part of The Ireland-US Council and has interesting people he is connected to there.

Andy Ruane
Chief Executive
Irish Channel America

www.irelanduscouncil.com...



Andy Ruane at Times Square celebrating Obama winning.

zpravy.idnes.cz...


www.katebulkley.com...
Not bad connections for somebody who started out as a pirate radio dj.

i think, dammit another thing Serco have control over...and I do think its a weird association...maybe you uncovered a purposefully hidden connection? but why hide it?

-B.M

Originally posted by hadriana
Here's a thread on SERCO www.abovetopsecret.com...

Thread claims Serco is the most dangerous corporation you've never heard of.

small world....i wrote that and it was a twist on the original title of the video - "the biggest company you've never heard of" I thought most dangerous was a more apt title considering their future potential coupled with their background & methods. They would probably disagree but my moneys still on them being crooked as they come. or at least the 75-80% of staff comprised of ex-public service anyway.....just my 2 cent...

-B.M

Originally posted by JBA2848
reply to post by Returners

 

Lots of Stuxnet news lately: Kaspersky and Symantec indicated that the worm used not one, but four zero-day Windows exploits. Ralph Langner concluded that the PLC manipulations he observes indicate an attack against a specific physical process. And Symantic has also found that the worm uses a peer-to-peer communications mechanism for software upgrades, as well as contact with a command and control server. Details below.

findingsfromthefield.com...

Seems they do have a comand and control that works by p2p which connected to the futbol gambling sites that I searched. At least thats what the experts say Kaspersky and Symantec.

This is not how P2P botnets work.

Infection works by the computer first getting exposed (through either the internet or infected USB) to malicious code and downloading it using some sort of exploit.

However the rootkit part is encrypted, this is because the antivirus software will block the rootkit. The rootkit which is the part of the program that hijacks the computer needs a key to unencrypt it so that it can hijack the computer. The virus first attempts to get the key by going to the command and control server (However this method is easy to block all the govt has to do is call up verizon and optimum and tell them to block the ip address or launch a ddos attack against the command and control server). So after the virus trys to contact the command and control server and fails it turns to p2p which means it basically starts spamming other computers with encrypted code, the only computers that can read the code are the ones that have the rootkit active. If it makes contact with an computer with the rootkit it will send the key to unlock the rootkit. And then the computer will become part of the botnet.

Basically my gist is that the command and control servers are meaningless as the command and control servers are too easy to take down, all the feds have to do is make a call to the owner of the ip address and tell them to unplug the computer.

en.wikipedia.org...

Newer botnets are almost entirely P2P, with command-and-control embedded into the botnet itself. By being dynamically updateable and variable they can evade having any single point of failure. Commanders can be identified solely through secure keys and all data except the binary itself can be encrypted. For example a spyware program may encrypt all suspected passwords with a public key hard coded or distributed into the bot software. Only with the private key, which only the commander has, can the data that the bot has captured be read.

Each and every node in a P2P botnet is capable of command and control, having a dedicated command and control server is just plain stupid since it can easily be stopped by observing where a computer upon receiving a fresh infection tries to contact and makign a simple telephone call.

I have been trying to figure out the connections between Serco-Siemens-Andy Ruane. I did a search for Serco& Siemens and many connections came up between these two companies. Siemens is the compnay that the Stuxnet software attacks. The reason I call it Stuxnet software is because it is over half a gigbyte in size. Not a small virus exploit of a few megabytes. Example Windows 2000 Professional Operating System (640MB) uses about the same as Stuxnet virus. Stuxnet is not small by a long shot. Now to the Serco-Siemens connections.

There competitors?

Transport for London (TfL) has awarded three five-year Traffic Control Maintenance and Related Services (TCMS) contracts to Serco Transport Technical Services, Siemens Plc Traffic Controls Division, and Peek Traffic Ltd.

www.tfl.gov.uk...

Heres a pdf on a Bloodhound Project? They want to build a 1000mph car? Sponsered by Serco & Siemens. And who else is involed in this project?

NATIONAL PHYSICAL LABORATORY (NPL)
The world-class researchers at the UK’s National Physical Laboratory (NPL) have
worked with the Atomic Weapons Establishment (AWE) and Fluid Gravity
Engineering (FGE) to advise The BLOODHOUND Team on two of the most high-risk
aspects of the world record attempt – wheel and rocket designs.
The National Physical Laboratory (NPL) is one of the UK’s leading science facilities
and research centres. It is a world-leading centre of excellence in developing and
applying the most accurate standards, science and technology available.

www.bloodhoundssc.com...

Strange connection?So what else is there?

Iraq War Profits Katy Brown looks at some of the companies profiting from the invasion of Iraq

Serco
Service company Serco received £5m a year (£7.5m in total) for an 18-month USAID contract for airport management. Serco is a major donor to Save the Children UK, which allegedly has muted criticisms of the Iraq war under pressure from Save the Children USA.1 www.serco.com

Siemens
Siemens received an unknown fee from USAID for work on the Daura power plant, ‘one of the most important electrical projects in the country’. The company pulled out in April 2004 but as of June 2005, Siemens was working in Iraq with Iraqi and non-Iraqi staff. www.siemens.com

www.ethicalconsumer.org...

Seems they were both war profiteers in Iraq being paid by USAID. Theres still more. Seems there working together in the Middle East. They are the Gold and Silver sponsers of the 1st Middle East Conference & Exhibition on Intelligent Transport Systems.

www.esafetysupport.org...

If they are competitors why do they seem like they work together? Well a little history on Siemens shows they are corrupt. They pay out billons in fines for price fixing and bribery every few years it seems.

Controversies
2007 Price fixing fine
In January 2007 Siemens was fined €396 million by the European Commission for price fixing in EU electricity markets through a cartel involving 11 companies, among which ABB, Alstom, Fuji, Hitachi Japan, AE Power Systems, Mitsubishi Electric Corp, Schneider, Areva, Toshiba and VA Tech According to the Commission, "between 1988 and 2004, the companies rigged bids for procurement contracts, fixed prices, allocated projects to each other, shared markets and exchanged commercially important and confidential information." Siemens was given the highest fine of €396 million, more than half of the total, for its alleged leadership role in the incident.

Bribery case
Siemens agreed to pay a record $1.34 billion in fines in December 2008[61] after being investigated for serious bribery, involving Heinz-Joachim Neubürger, former chief financial officer, Karl-Hermann Baumann, another former CFO and exchairman, and Johannes Feldmayer, a former management board member. The investigation found questionable payments of roughly €1.3 billion, from 2002 to 2006 that triggered a broad range of inquiries in Germany, the United States and many other countries.

In May 2007 a German court convicted two former executives of paying about €6 million in bribes from 1999 to 2002 to help Siemens win natural gas turbine supply contracts with Enel, an Italian energy company. The contracts were valued at about €450 million. Siemens was fined €38 million.

Iran telecoms controversy
Siemens was part of a joint venture with Nokia in 2008 to provide Iran's monopoly telecom company with technology that allowed it to intercept the internet communications of its citizens to an unprecedented degree. The technology reportedly allowed it to use 'deep packet inspection' to read and even change the content of everything from "emails and internet phone calls to images and messages on social-networking sites such as Facebook and Twitter". The technology "enables authorities to not only block communication but to monitor it to gather information about individuals, as well as alter it for disinformation purposes" expert insiders told the Wall Street Journal. During the post-election protests in Iran in June 2009, Iran's internet access was reported to have slowed to less than a tenth of its normal speeds, and experts suspected this was due to the use of the interception technology. The joint venture company, Nokia-Siemens Networks, asserted in a press release that it provided Iran only with a 'lawful intercept capability' "solely for monitoring of local voice calls". "Nokia Siemens Networks has not provided any deep packet inspection, web censorship or Internet filtering capability to Iran," it said.

en.wikipedia.org...

Originally posted by JBA2848
The reason I call it Stuxnet software is because it is over half a gigbyte in size. Not a small virus exploit of a few megabytes. Example Windows 2000 Professional Operating System (640MB) uses about the same as Stuxnet virus. Stuxnet is not small by a long shot.

Stuxnet is about half a megabyte in size. Big; very big for a virus, but not gargantuan like a half a gigabyte would be.

Source: www.wired.com...