PULSE NAME
fast16 | Mystery ShadowBrokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet
WHITE AlienVault 2026-04-24 Modified: 2026-04-24
49
IOCs
MEDIUM VOLUME
Researchers uncovered fast16, a cyber sabotage framework from 2005 that predates Stuxnet by five years. The toolset includes fast16.sys, a kernel driver that selectively targets high-precision calculation software by patching code in memory to corrupt computational results. Combined with self-propagation mechanisms via a Lua-powered carrier module (svcmgmt.exe), the framework spreads across facilities to produce consistent inaccurate calculations. This operation represents the first documented instance of strategic cyber sabotage targeting ultra-expensive computing workloads in advanced physics, cryptographic, and nuclear research. The framework uses an embedded Lua virtual machine predating Flame by three years and appears in the ShadowBrokers leak of NSA Territorial Dispute components with the evasion signature: 'fast16 *** Nothing to see here – carry on ***'.
Indicators of Compromise (19 / 49 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 e6018cd482c012de8b69c64dc3165337bc121b86 2026-04-24
FileHash-SHA1 145ef372c3e9c352eaaa53bb0893749163e49892 2026-04-24
FileHash-SHA1 1ce1111702b765f5c4d09315ff1f0d914f7e5c70 2026-04-24
FileHash-SHA1 2fa28ef1c6744bdc2021abd4048eefc777dccf22 2026-04-24
FileHash-SHA1 3ce5b358c2ddd116ac9582efbb38354809999cb5 2026-04-24
FileHash-SHA1 586edef41c3b3fba87bf0f0346c7e402f86fc11e 2026-04-24
FileHash-SHA1 650fc6b3e4f62ecdc1ec5728f36bb46ba0f74d05 2026-04-24
FileHash-SHA1 675cb83cec5f25ebbe8d9f90dea3d836fcb1c234 2026-04-24
FileHash-SHA1 829f8be65dfe159d2b0dc7ee7a61a017acb54b7b 2026-04-24
FileHash-SHA1 92e9dcaf7249110047ef121b7586c81d4b8cb4e5 2026-04-24
FileHash-SHA1 952ed694b60c34ba12df9d392269eae3a4f11be4 2026-04-24
FileHash-SHA1 9e089a733fb2740c0e408b2a25d8f5a451584cf6 2026-04-24
FileHash-SHA1 ca665b59bc590292f94c23e04fa458f90d7b20c9 2026-04-24
FileHash-SHA1 d475ace24b9aedebf431efc68f9db32d5ae761bd 2026-04-24
FileHash-SHA1 de584703c78a60a56028f9834086facd1401b355 2026-04-24
FileHash-SHA1 3471224e20d7b6912816509b7154e2f24c06425c 2026-04-24
FileHash-SHA1 6f20bd7308ec165af23609dceb7849fedfe6205c 2026-04-24
FileHash-SHA1 79fcf9f8e1db09e5b403b83b9f5910bdda24aff7 2026-04-24
FileHash-SHA1 c9408c1d9bab5974e23584e944819019e2500100 2026-04-24