In July 2022, Calisto targeted scientists at the Brookhaven National Laboratory with a fake login page to steal credentials. The hackers appear to have used the harvested credentials to access documents related to counter-proliferation and nuclear accountability in Russia and other states.