John Does 1-2 (1)
Events whose actors field, as written by the source, names this.
| Date (as written) | Incident | Country | Actors |
|---|---|---|---|
| active since 2010 (complaint filed December 2019) | Microsoft civil action to seize Thallium command-and-control domains used for spearphishing and credential theft against government employees, nuclear-proliferation workers, think tanks, universities and human rights organizations | Thallium ("linked by many in the security community to North Korean hacking group or groups"); John Does 1-2 |