Malware

Flame

First seen: 2012-05 • Status: inactive

Currently Inactive

Flame was a huge spying program that recorded conversations and took screenshots. It was used against Iran and other Middle Eastern countries.

Overview

Flame was a massive espionage toolkit targeting Middle Eastern countries. It could record audio, capture screenshots, and spread via USB.

Also Known As

Flamer, Skywiper

How It Spreads

  • Windows Update exploitation
  • USB drives
  • Network shares

What It Does

  • Audio recording
  • Screen capture
  • Bluetooth data collection
  • Keyboard logging

Is your business exposed?

Target Platforms

Windows

Detection Tips

  • Historical threat - study for understanding nation-state capabilities

MITRE ATT&CK Techniques

T1123, T1113, T1005

If You're Infected

  1. 1.

    Historical threat - no longer active

Related Malware

Duqu, Stuxnet

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required