Exocet said:
Oh come on, this virus is clearly a diversion, a way to probe how the public would react to cyber-warfare being used covertly, and a way to test out cyber-defenses.
If a "spy" virus were to be used to slow down military installations, why the hell would they disguise it as a windows update, and make it able to record Skype calls?
If there indeed a military/intelligence grade virus going around, it's probably not something that easily caught, it would probably not even try to masquerade as a program, it would just trick the computer in question into thinking it isn't there, and not taking up any space.
Pff, windows update...You can do better people.
I think you slightly misunderstand what Flame represents, simply as an achievement in Software Engineering.
It ran undetected for at least two years.
It utilized cryptographic techniques that have never been used before in the wild and kind of require a specialized Phd to even explain properly.
Its ability to record Skype calls was due to its ability to just turn hardware (such as mircrophones) on and off at will and then covertly send the information back to its operators.
It also did not technically "disquise itself as a windows update", it just used the process of windows update (which is incredibly hard to manipulate) to gain further system privileges in already compromised systems
I´m sorry, as cool as it would be, people can´t do better at the moment.
Actually, most experts where kind of blown away that we can do AS GOOD as this at the moment.
Which, in turn, also informs why it is so plausible to blame America for Flame.
Because the list of organizations who can pull off something like this is kind of short.