Fast16: SentinelOne Discovers Pre-Stuxnet Sabotage Malware from 2005 Targeting Engineering Simulation Software

r/programming·medium signal

SentinelOne Labs published research on Fast16, a Lua-based sabotage malware compiled in 2005 — five years before Stuxnet — that was designed to corrupt floating-point calculations in high-precision engineering software including LS-DYNA 970, PKPM, and MOHID hydrodynamic modeling. The name 'fast16' appears in the Shadow Brokers' leak of NSA 'Territorial Dispute' deconfliction signatures. The kernel driver (fast16.sys) patched FPU routines to produce subtly wrong outputs in physics simulations and civil engineering calculations — a controlled corruption approach that would be nearly impossible to detect through normal testing.