It looks like Google, Adobe and at least some of the other unnamed victims of the Aurora attacks were compromised by what amounts to a relatively pedestrian phishing attack. Security researchers have been saying for years now that attackers are using zero days as a matter of course. This is not The New New Thing, or even The somewhat new thing. It s Attacking 101 now, and while the federal government scramble to understand the threat, the attackers are moving on to other techniques and strategies, secure in the knowledge that they’re several steps ahead.
Source: https://threatpost.com/google-attack-was-tip-iceberg-020510/73496/