Several of the malware variants collected and analyzed during Operation Blockbuster were reportedly used in the cyberespionage campaign Operation Troy, active from 2009 to 2012. This campaign has been connected not only to the