Tracking GhostNet: Investigating a Cyber ... - Nart Villeneuve
Tracking GhostNet: Investigating a Cyber ... - Nart Villeneuve
Tracking GhostNet: Investigating a Cyber ... - Nart Villeneuve
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
JR02-2009 <strong>Tracking</strong> <strong>GhostNet</strong> - PART TWO<br />
19<br />
Fig. 1<br />
A “Social Engineering” attack connects to <strong>GhostNet</strong>.<br />
This Palantir screen capture summarizes the relationships between an “unknown sender” pretending to be “campaigns@freetibet.org”, the email<br />
sent to the International Tibet Support Network , and the attachment (“Translation of Freedom Movement ID Book for Tibetans in Exile.doc”)<br />
that contained malware that connected to a <strong>GhostNet</strong> control server.