We manually analyzed all submitted emails and attachments to determine whether they contained politicallymotivated malware. The malware is then analyzed in detail to extract information such as the vulnerability, C&C