3133
According to research , the group uses a custom information - stealing remote access Trojan ( RAT ) known as Trojan.Ismdoor as well as a selection of hacking tools to steal sensitive credentials from compromised organizations .
 ( data breach: steal,  the group: attacker, sensitive credentials: compromised data, compromised organizations: victim, Trojan.Ismdoor: tool, hacking tools: tool, a custom information - stealing remote access Trojan ( RAT ): tool) 
Locate the role in the text that participated in the event based on the event type and return it in the event list. 
 Option: Event type: phishing, data breach, ransom, discover vulnerability, patch vulnerability, Arguments type: vulnerable system, capabilities, vulnerability, number of victim, issues addressed, compromised data, damage amount, common vulnerabilities and exposures, victim, patch number, number of data, tool, discoverer, time, purpose, place, payment method, releaser, vulnerable system version, attacker, supported platform, patch, price, vulnerable system owner, trusted entity, attack pattern. 
Text: {0} 
Answer:
 ( data breach: steal,  the group: attacker, sensitive credentials: compromised data, compromised organizations: victim, Trojan.Ismdoor: tool, hacking tools: tool, a custom information - stealing remote access Trojan ( RAT ): tool) 