How did GhostNet infect computers and collect information from networks?

The GhostNet spy network compromised computers by tricking users into opening malicious e-mail attachments or clicking on infected Web page links.1

Once a system was infected with the GhostNet malware, it would begin searching for files across the local computer network. Furthermore, the malware possessed the capability to remotely activate cameras and video-recording devices to conduct surveillance on the compromised systems. This extensive operation, discovered in 2009, affected over a thousand computers across 103 countries, with a significant concentration of breaches occurring within foreign affairs bureaus and embassies.1