October 31, 2012
Spy vs. Spy
Georgia's CERT deliberately infected one of its own PCs with the malware, and planted a ZIP file named "Georgian-Nato Agreement" on its drive, hoping it would prove irresistible for the hacker.Hat Tip: Internet Anthropologist.
Sure enough the hacker stole the archive file and ran malware that Georgia CERT had planted inside, meaning that now investigators had control over the hacker's own computer.
This made it relative child's play to capture images of the suspect at work in front of his PC.