06.02.2015 Views

Tracking GhostNet: Investigating a Cyber ... - Nart Villeneuve

Tracking GhostNet: Investigating a Cyber ... - Nart Villeneuve

Tracking GhostNet: Investigating a Cyber ... - Nart Villeneuve

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

JR02-2009 <strong>Tracking</strong> <strong>GhostNet</strong> - PART TWO<br />

19<br />

Fig. 1<br />

A “Social Engineering” attack connects to <strong>GhostNet</strong>.<br />

This Palantir screen capture summarizes the relationships between an “unknown sender” pretending to be “campaigns@freetibet.org”, the email<br />

sent to the International Tibet Support Network , and the attachment (“Translation of Freedom Movement ID Book for Tibetans in Exile.doc”)<br />

that contained malware that connected to a <strong>GhostNet</strong> control server.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!