The Flame malware was over-hyped. But it’s a good exercise in threat modeling. In my model, the attacker’s strategy is “leaky abstraction.”