Also, the original Verizon report: http://securityblog.verizonbusiness.com/2013/01/14/case-stud... (seems to be down, cache: http://webcache.googleusercontent.com/search?q=cache:http://...)