Take the tour ×  In the recent New York Times attacks, how did
the attackers gain access to the server?  Additionally, is there
any evidence that these attacks were launched by China, aside
from the proxy?  share|improve this question A 1 minute google
search will reveal that this information is not known. The
blogosphere is choked to death by pundits who have opinions, but
only the culprits know how they obtained access. –  Mark C.
Wallace Feb 5 at 18:32 add comment  closed as too localized by
AJ Henderson, Ninefingers, Iszi, this.josh, Rook Feb 6 at 0:02
1 Answer  The article you linked to gives as much information as
is publicly known. So I'll just quote from there:   And also:
Which means that this isn't software you're going to find on
metasploit. It's something custom that they built.   So, 3
employees workstations compromised with RATs (probably via email
spear phishing) leveraged to gain access to the domain
controller.   Active Directory is known to use unsalted hashes
for password storage. There