BTW, I also suspect a Chinese and/or Russian origin to these attacks, but Iran can’t be ruled out either.
I don’t have any personal knowledge of the nature of the origin of the problem, but the Wired Magazine Danger Room blog says it’s a worm from 2005.