content: Ars Technica article has more on potential Israel involvement (entire section!):  Implicating Israel Kaspersky researchers have long eschewed the practice followed by many of their security research peers of attributing attacks to particular hacking groups or the sovereign nations that often support them. Wednesday's report documenting the Duqu 2.0 attacks is no different. Still, it's not hard to read between the lines to paint Israel as a prime suspect. While neither the US nor Israel has officially acknowledged any involvement with Stuxnet, New York Times reporter David Sanger's book Obama's Secret Wars and Surprising Use of American Power leaves little doubt the computer weapon was jointly developed by the two countries in an attempt to sabotage Iran's uranium enrichment program. Nearly identical code signatures in Stuxnet and the 2011 version of Duqu mean that whoever developed the latter had broad access to the Stuxnet source. And given the work schedules of the Duqu attackers, it seems likely they were physically located in or near Israel. Other circumstantial evidence points to Israel. For one, the Duqu attackers targeted participants of the Auschwitz-Birkenau anniversary, an event that was of importance to the Jewish state. And for another, as The Wall Street Journal reported in March, Israel spied on nuclear talks the US and other P5+1 countries convened with Iran. It seems unlikely the US was directly involved in Duqu, since countries rarely spy on their own diplomatic negotiations. What's more, one of the parties targeted by Duqu was at the same time infected by Equation Group, a discovery that suggests the two groups are different and compete with each other. The private report two weeks ago of CVE-2015-2361 to Microsoft by enSilo is another connection to Israel, albeit one that may be only coincidental. Still, two executives of the security company previously worked for Israeli military contractor Rafael Advanced Defense Systems, one of whom previously was a system architect in the Israeli Defense Forces.  http://arstechnica.com/security/2015/06/stepson-of-stuxnet-stalked-kaspersky-for-months-tapped-iran-nuke-talks/