This threat actor has been targeting the U.S. defense industrial base, telecommunications, computer hardware, government contractors, and aerospace firms since at least 2006. It was also seen targeting "Umbrella revolution" activists.