The NYT article describing the attack is a non-article, as they don't have real proof (or perhaps they do, but they haven't disclosed it).
Reasons are well developped on the ErrataSec blog [1].<p>[1] <a href="http://erratasec.blogspot.fr/2013/01/the-nytimes-article-was-content-free.html" rel="nofollow">http://erratasec.blogspot.fr/2013/01/the-nytimes-article-was...</a>