Security researchers dissect Flame's handling program, find three new viruses 'at large'

It seems that there's more than two out-of-control computer viruses roaming around the Middle East. Security researchers think that a further three could be operating "at large," with one positively identified on machines in Iran and Lebanon. Teams from Symantec and Kaspersky have separately found that the Flame malware had the electronic equivalent of a "handler," a program called NEWSFORYOU, which is also in charge of three viruses that are code-named SP, SPE and IP. The two teams have been unsuccessful in finding a sample of the trio for analysis and despite finding a cache of data on a command-and-control server, decoding it is "virtually impossible." While both security companies have declined to point a finger as to their origin, Reuters' sources suggest the United States, while The Washington Post has been told that the project was a joint-enterprise with Israel -- in keeping with the existing narrative that the pair were behind Stuxnet.

Filed under: Networking, Internet, Alt

Security researchers dissect Flame's handling program, find three new viruses 'at large' originally appeared on Engadget on Mon, 17 Sep 2012 13:51:00 EDT. Please see our terms for use of feeds.