A threat actor used FinFisher, also known as FinSpy, to infect mobile phones and computers and place targets under surveillance. The threat actor, allegedly the Indonesian government, used a proxy server inside the Global Switch Sydney East data center in Ultimo, Australia, to obscure their identity.