Stuxnet: named for files .stub (where config was stored) and mrxnet.sys (main driver), by Microsoft Duqu: named for the "~DQ-" temporary files it created, by r

Stuxnet: named for files .stub (where config was stored) and mrxnet.sys (main driver), by Microsoft Duqu: named for the "~DQ-" temporary files it created, by researchers in Hungary who found it and wrote report Flame: is from a routine called "InstallFlame", so the malware name is likely same between discoverers and writers. The naming convention is usually to find a unique identifier used in the malware. Portmanteau's are common. We often don't find out what the writers name was, although both Stuxnet and Flame were part of Operation Olympic Games[0] [0] http://en.wikipedia.org/wiki/Operation_Olympic_Games http://en.wikipedia.org/wiki/Operation_Olympic_Games