Photo Gallery: How the Intelligence Service Cracks Internet Hubs 12/30/2013
 Steps 3 and 4: The FOXACID server sends a data packet, disguised as a Yahoo...
SPIEGEL ONLINE

Steps 3 and 4: The FOXACID server sends a data packet, disguised as a Yahoo data packet, to the target’s computer. It contains a link to a web address (URL) that TAO has loaded with malware. At the same time, the data packet from the target’s computer reaches the Yahoo server it was actually attempting to access.