
Looks like a new worm has been making its way around Middle Eastern computers. It's quite a step up from Stuxnet in terms of size/complexity, but seems to be meant mostly for gathering information.
Once a system is infected, Flame begins a complex set of operations, including sniffing the network traffic, taking screenshots, recording audio conversations, intercepting the keyboard, and so on. All this data is available to the operators through the link to Flame’s command-and-control servers.
The bit I found most interesting:
The malware has the ability to regularly take screenshots; what’s more, it takes screenshots when certain “interesting” applications are run, for instance, IM’s. Screenshots are stored in compressed format and are regularly sent to the C&C server - just like the audio recordings.
I'd recommend a read of the analysis FAQ for anyone interested in some of the high-level details:
link
(EDIT: fixed link via delete/create thread thanks to edit limit)