GhostNet Breakdown

The Information Warfare Monitor (IWM) provides an excellent in-depth analysis of the design and function of GhostNet. As we discussed GhostNet was a botnet comprised of approximately 1,300 infected machines. The infected machines were located in 103 countries and appear to have been specifically targeted because they contained access to politically sensitive information.

The following graphic produced by the IWM provides a breakdown of where the infected computers were located.

I highly recommend that you read the IWM report.