Confirmation of American involvement in Stuxnet comes as computer security experts begin to unpick an even more complicated virus, Flame, which was detected last month and also appears to target Iran. It is written for espionage rather than sabotage, but like Stuxnet is passed from computer to computer by USB thumb drives, a design feature apparently meant to limit its spread and so reduce its risk of detection.