I am not a security expert, but it doesn't seem that hard to figure out how this is being done. Lots of money to an insider/spy/human that has access to the places one would like to install said malware. Most of these stories seem to involve good, old fashioned social engineering. Albeit, social engineering with with lots of money or another kind of leverage.<p>Or... maybe I am naive. I just tend to look at this stuff with how can we get this done the easiest way??? Human emotions are much easier to target than silicon.