Over the past few days, a piece of malware known as Stuxnet has played out many of the fears of critical infrastructure owners around the world. The spy program is a sophisticated rootkit designed to steal data from SCADA networks, the type of software that control energy utilities, transportation, and other vital systems. That makes it the first publicly-known threat, aside from occasional unattributed reports, to target the long-vulnerable infrastructure systems.

But even as attention to the spyware grows, the worm may still be largely the Middle East and Asia’s problem. Yesterday cybersecurity firm Symantec issued new data showing Stuxnet infections by country. And according to those numbers, nearly 60% of the 14,000 infections they tracked over the last 72 hours are still found in Iran, where the malware was first detected, while another 30% of infections are in India, Azerbaijan, and Indonesia. Only