A new cyberespionage tool linked to the Flame virus has been infecting computers in Lebanon, Iran and elsewhere, say experts.