An APT group that surfaced in 2017, they initially focused primarily on governmental targets in Iraq and Saudi Arabia before moving on to other Middle Eastern and European countries. Their attacks usually target sensitive personnel and organizations in an attempt to steal information. They employ a wide range of methods for distributing their attacks, including macros and social engineering.