According to the report, the intruders used widely available attack methods known as SQL injection and spear phishing to compromise their targets.

Wait, there's a version of phishing called spear phishing? And NYT knew about it? Crazy.

-janelane

Hackers Breach Systems of 5 Multinational Oil Companies - NYTimes.com