https://www.cybereason.com/blog/cuckoo-spear-pt2-threat-actor-arsenal