This doesn't contain the payload. That means its target is not the same as Stuxnet. I would assume that master copy of the Duqu takes over a computer then inst

This doesn't contain the payload. That means its target is not the same as Stuxnet. I would assume that master copy of the Duqu takes over a computer then installs a recon'ing version on the USB stick that travels to the targeted facilities. Of course this assumes Duqu's purpose/target/method are the same as Stuxnet. It could also be true that the attackers already know the info about the facility. All this strain of the virus is looking for is someone who works there. I dunno...the ambiguity (in the article) is so high that the number of plausible scenarios is up there too.