linked to the regime. These malware groups have been active since 2011, and have used a wide range of CommercialOff-The-Shelf (COTS) Remote Access Trojans (RATs) to target the opposition. Typically, these groups bundle RATs with a