‘Gadget’ in the middle: Flame malware spreading vector identified - Securelist

‘Gadget’ in the middle: Flame malware spreading vector identified - Securelist: In our FAQ on Flame (https://www.securelist.com/en/blog/208193522/The_Flame_Questions_and_Answers) posted on May 28, 2012, we postulated there might be a still undiscovered zero-day vulnerability in Flame: “At the moment, we haven’t seen use of any 0-days; however, the worm is known to have infected fully-patched Windows 7 systems through the network, which might indicate the presence of a high risk 0-day.” Our suspicion was heightened because fully patched Windows 7 machines were being infected over the network in a very suspicious manner.