TheStars virus is acomputer virus which infects computers runningMicrosoft Windows. It was named and discovered byIranian authorities in April 2011. Iran claimed it was used as a tool to commitespionage.[1][2] Western researchers believes that it is probably the same virus as theDuqu, part of theStuxnet attack on Iran.
The Stars virus was studied only in an Iranian laboratory, with othercybersecurity organizations not having access to samples, and therefore not being able to compare it toDuqu,Stuxnet, or any other known malware.[1][2] Foreign computer experts say they have seen no evidence of the virus, and some even doubt its actual existence.[3][4] Iran is claiming Stars to be harmful for computer systems. It is said to inflict minor damage in the initial stage and might be mistaken for executable files of governmental organizations.[1][2]
This is the second attack claimed by Iran after the Stuxnet, acomputer worm discovered in July 2010 that targetedindustrial software and equipment.[2][5]
Researchers came to believe that the Stars virus found by Iranian computer specialists was the Duqu virus. The Duqu viruskeylogger was embedded in aJPEG file. Since most of the file was taken by the keylogger only a portion of the image remained.[clarification needed] It turned out to be an image taken by theHubble telescope showing a cluster of stars, the aftermath of two galaxies colliding.Symantec,Kaspersky andCrySyS researchers came to believe Duqu and Stars were the same virus.[6][7]