according to crowdstrike from 2014 to 2016, the group used android malware to target the ukrainian army's rocket forces and artillery. they distributed an infected version of an android app whose original purpose was to control targeting data for the d-30 howitzer artillery. the app, used by ukrainian officers, was loaded with the x-agent spyware and posted online on military forums. crowdstrike initially claimed that more than 80% of ukrainian d-30 howitzers were destroyed in the war, the highest percentage loss of any artillery pieces in the army (a percentage that had never been previously reported and would mean the loss of nearly the entire arsenal of the biggest artillery piece of the ukrainian armed forces). according to the ukrainian army crowdstrike's numbers were incorrect and that losses in artillery weapons "were way below those reported" and that these losses "have nothing to do with the stated cause". crowdstrike has since revised this report after the international institute for strategic studies (iiss) disavowed its original report, claiming that the malware hacks resulted in losses of 15–20% rather than their original figure of 80%.