BOSTON: Security experts have discovered a highly sophisticated computer virus in Iran and the Middle East that they believe was deployed at least five years ago to engage in state-sponsored cyber espionage.
Iranian officials have acknowledged that the sophisticated virus has infected computers across the country and, echoing the conclusions of security researchers, suggested that the malicious code is related to the virus that damaged centrifuges in an Iranian nuclear facility two years ago.
In a statement, Iran’s National Computer Emergency Response Team said that “investigations during the last few months” had resulted in the detection of the virus, which has been dubbed Flame and is capable of stealing data from infected computers.
“It seems there is a close relation to the Stuxnet and Duqu targeted attacks,” the statement said, referring to two other viruses. Stuxnet damaged hundreds of centrifuges at the Natanz nuclear plant. Duqu, like Flame, was apparently built for espionage but shared characteristics with Stuxnet.
The Iranians also said they had developed tools to detect and remove Flame from infected computers.
Iran has in the past blamed Israel and the United States for creating Stuxnet, but there has been no proof of authorship.
Kaspersky researchers said they have yet to determine whether Flame had a specific mission like Stuxnet, and declined to say who they think built it.
Iran has accused the United States and Israel of deploying Stuxnet.
Cyber security experts said the discovery provides new evidence to the public to show what experts privy to classified information have long known: that nations have been using pieces of malicious computer code as weapons to promote their security interests for several years.
“This is one of many, many campaigns that happen all the time and never make it into the public domain,” said Alexander Klimburg, a cyber security expert at the Austrian Institute for International Affairs.
Experts at Kaspersky Lab and Hungary’s Laboratory of Cryptography and System Security who have spent weeks studying Flame said they have yet to find any evidence that it can attack infrastructure, delete data or inflict other physical damage.
Yet they said they are in the early stages of their investigations and that they may discover other purposes beyond data theft. It took researchers months to determine the key mysteries behind Stuxnet, including the purpose of modules used to attack a uranium enrichment facility at Natanz, Iran.
“Their initial research suggest that this was probably written by the authors of Stuxnet for covert intelligence collection,” said John Bumgarner, a cyber warfare expert with the non-profit US Cyber Consequences Unit think tank.
Flame appears poised to go down in history as the third major cyber weapon uncovered after Stuxnet and its data-stealing cousin Duqu, named after the Star Wars villain.
Flame can gather data files, remotely change settings on computers, turn on PC microphones to record conversations, take screen shots and log instant messaging chats. Kaspersky Lab said Flame and Stuxnet appear to infect machines by exploiting the same flaw in the Windows operating system and that both viruses employ a similar way of spreading.
A US Defense Department spokesman, David Oten, refused to comment on Flame, saying it may take “some time.”
FROM: AGENCIES
Tehran acknowledges Flame virus has infected computers
Tehran acknowledges Flame virus has infected computers
Major airlines suspend, reroute flights amid US-Israel strikes on Iran
- Saudia says decision taken in line with aviation safety and security standards
- Emirates says regional airspace closures cause disruption to several of its flights
RIYADH: Major international airlines across the Middle East and South Asia have suspended, canceled or rerouted flights following ongoing US-Israel attacks on Iran and the resulting airspace closures, according to official statements issued via X.
Saudia said in an official statement that it had canceled a number of flights due to developments in the region and the closure of airspace. The airline said the decision was taken in line with aviation safety and security standards, noting that its Emergency Coordination Center is closely monitoring developments with relevant authorities. Saudia urged passengers to verify the status of their flights before heading to the airport and said guests would be notified of updates through the contact details associated with their bookings. The carrier added that further information would be announced in a subsequent statement if available.
بيان رسمي من #الخطوط_السعودية pic.twitter.com/CHfjKj9yLX
— Saudia Group | مجموعة السعودية (@SaudiaGroup) February 28, 2026
Air Arabia said its flights were experiencing cancellations, delays or rerouting as a result of the evolving situation and airspace closures. The airline advised passengers to check the status of their flights before traveling to the airport by visiting its website or contacting its call center. Customers booked on affected flights will be notified directly, the airline said, adding that further updates would be provided as the situation develops.
Air India announced a broader suspension, stating that “in view of the developing situation in parts of the Middle East, all Air India flights to all destinations in the Middle East have been suspended.” The airline said it remains committed to maintaining the highest standards of safety for passengers and crew and will continue to assess the safety and security environment for flight operations, adjusting services proactively as required. Air India said its teams would extend necessary support to passengers and advised customers to check flight status online or contact its 24/7 call center for assistance.
#TravelAdvisory
— Air India (@airindia) February 28, 2026
In view of the developing situation in parts of the Middle East, all Air India flights to all destinations in the Middle East have been suspended. We remain committed to maintaining the highest standards of safety for our passengers and crew. We will continue to…
Dubai-based Emirates reported that regional airspace closures had caused disruption to several of its flights. The airline said it is actively monitoring the situation, engaging with relevant authorities and adjusting operations in line with the latest developments. Emirates said it adheres to all regulatory requirements and follows guidance issued by aviation authorities. The carrier apologized to affected customers and said it is assisting them with rebooking, refunds or alternative travel arrangements, reiterating that the safety and security of passengers and crew remain its highest priority.
Due to multiple regional airspace closures, Emirates has temporarily suspended operations to and from Dubai.
— Emirates Support (@EmiratesSupport) February 28, 2026
Emirates urges customers to check https://t.co/Ucm3UswfVh and https://t.co/yehFUeWZQq for the latest updates before proceeding to the airport.
We are actively monitoring… pic.twitter.com/SLDC7iNaUN
Qatar Airways confirmed a temporary suspension of flights to and from Doha due to the closure of Qatari airspace. The airline said it is working closely with government stakeholders and relevant authorities to support impacted passengers and will resume operations once the airspace reopens. It warned that delays are anticipated when usual operations resume and said additional ground staff have been deployed at Hamad International Airport and other key airports to assist passengers.
Temporary Suspension of Qatar Airways Flights due to Qatari Airspace Closure
— Qatar Airways (@qatarairways) February 28, 2026
Qatar Airways Group confirms the temporary suspension of its flights to, and from, Doha due to the closure of Qatari airspace.
The airline is working closely with government stakeholders and the…
Meanwhile, Al Jazeera reported that British Airways had canceled flights to Tel Aviv and Bahrain, adding to the list of carriers adjusting operations.
Across their statements, airlines consistently cited airspace closures and safety considerations as the primary reasons for suspensions and disruptions, while urging passengers to monitor official channels for updates as the situation continues to evolve.
