 According to McAfee, one of Duqu's actions is to steal digital certificates (and corresponding private keys, as used in public-key cryptography) from attacked computers to help future viruses appear as secure software.Duqu uses a 54×54 pixel JPEG file and encrypted dummy files as containers to smuggle data to its command and control center.Security experts are still analyzing the code to determine what information the communications contain.