Detailed Mandiant report on attacker activity that is pretty cool, such as embedded devices and old conference video systems(!).