Flame - a look at funky stuff from the CIA

[STC]

http://www.wired.com/threatlevel/2012/05/flame/

Lock up your daughters!

The malware, which is 20 megabytes when all of its modules are installed, contains multiple libraries, SQLite3 databases, various levels of encryption — some strong, some weak — and 20 plug-ins that can be swapped in and out to provide various functionality for the attackers. It even contains some code that is written in the LUA programming language — an uncommon choice for malware....."It's pretty fantastic and incredible in complexity," said Alexander Gostev, chief security expert at Kaspersky Lab.

Flame appears to have been operating in the wild as early as March 2010, though it remained undetected by antivirus companies.

"It's a very big chunk of code. Because of that, it's quite interesting that it stayed undetected for at least two years," Gostev said. He noted that there are clues that the malware may actually date back to as early as 2007, around the same time-period when Stuxnet and DuQu are believed to have been created.....

[barnabas1969]

<tongue_in_cheek>
I'm glad it's only targeting enemies of the USA!
</tongue_in_cheek>

[jtennison]

Wow! Who knew the cooks at the Culinary Institute of America could do this?