malware this insidious should have arisen in multiple sites with multiple analysts looking at it. Stuxnet was floating around the net for about a year before t

malware this insidious should have arisen in multiple sites with multiple analysts looking at it. Stuxnet was floating around the net for about a year before there was public discussion. It was only afterwards that people went back and realized that something had been there all along. Part of the problem with expecting people to notice this class of viruses is that they are not malicious, don't use excessive amounts of resources and are deliberately designed to be stealthy. They aren't a general purpose bot-net, they don't target anyone's bank accounts -- in short they have the lowest possible profile that a well-funded and well-managed engineering organization can come up with. From that perspective, the only odd sounding behavior is that infected systems avoid booting from anything but USB drives. That's a little high-profile for this class of virus. It isn't enough for me to dismiss Dragos's claims, but it is incongruous with the assumed design goals.