Rootkit worm linked to hacker group in Middle East