GhostNet, first identified about a year ago, is much larger and more sophisticated than previously assumed according to a study entitled Shadows in the Cloud The study was carried out by the Munk Centre for International Studies, the Information Warfare Monitor, the SecDev Group and the Shadowserver Foundation. Goontact lures users of illicit sites through Telegram and other secure messaging apps and steals their information for future fraudulent use. Read the full article in H Security: GhostNet.
Source: https://threatpost.com/spyware-botnet-ghostnet-uses-cloud-040610/73790/