and analyzing information on attacks gleaned from field research and reports that were shared with us by thirdparties. Each of these starting points branched off from one another and crossed paths in various ways, revealing at least two distinct cyber espionage networks.