According to the research from Kaspersky, the majority of infected systems are in Iran, followed by Palestinian, Israel, Syria and Sudan. Researchers suspect that the Flame virus belongs to the same family of the notorious and malicious Stuxnet program and its successor, Duqu. Kaspersky Labs considers the introduction of the Flame virus another phase in cyberwarfare.
Per the technical analysis of Crysys Lab, a unit investigating viruses at Budapest University, the Flame virus has been created by a nation state or government with significant funding behind its design.
Crysys Lab authorities claim that the Flame virus is carefully engineered to be highly potent and secretly gather information from large networks of infected machines. The Flame virus tackles all important opportunities to collect information, such as the screen, keyboard, Wi-Fi, microphone, network, storage devices, system processes, Bluetooth and USBs.
Investigators illustrate unparalleled software layers, which are intended to unnoticeably permit the Flame virus to break into computer networks. The 20 MB file infects Microsoft Windows computers and includes five encryption algorithms and unique data storage models.
At the time the virus was discovered, Crysys Lab claimed that a link between Flame, Stuxnet and Duqu has not yet been proven. Although they share several common elements, Flame bears only minor similarity to the other viruses. For example, the Flame virus does not automatically self-propagate, but it can do so if enabled by its hidden controllers.
Read More »