According to those who have followed the attack at the SANS Institute's Internet Storm Center, a cybersecurity crisis response organization, the infection tool is partially written in Chinese characters and compiled on a computer with Chineselanguage settings.