trend micro designated the actors behind the sofacy malware as operation pawn storm on october 22, 2014. the name was due to the group's use of "two or more connected tools/tactics to attack a specific target similar to the chess strategy," known as pawn storm.