Affiliations
- Also known as Thallium and Smoke Screen
This threat actor targeted foreign ministries and think tanks in Europe and the United States using malware hidden in Microsoft Word documents and antiquated file formats.
Suspected victims
- France
- U.S. Think Tanks
- Slovakia
- UK Think Tanks
- Stanford University
Suspected state sponsor
- Unknown
Target category
- Government
- Private sector