Tracking GhostNet: Investigating a Cyber ... - Nart Villeneuve
Tracking GhostNet: Investigating a Cyber ... - Nart Villeneuve
Tracking GhostNet: Investigating a Cyber ... - Nart Villeneuve
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
JR02-2009 <strong>Tracking</strong> <strong>GhostNet</strong> - PART TWO<br />
20<br />
Fig. 2<br />
A “Socially Engineered” email sent to the International Tibet Support<br />
Network.<br />
This email was sent on July 25, 2008 by an unknown attacker pretending to be “campaigns@freetibet.org” to the International Tibet Support<br />
Network. Attached to the message was a Microsoft Word document named “Translation of Freedom Movement ID Book for Tibetans in Exile.doc”<br />
that exploits a vulnerability in Word to install malware on the target’s computer system.
Change language