The cyberespionage activities consist of spear-phishing campaigns that are designed to entice victims into opening booby-trapped attachments, which ultimately lead to the deployment of stealers such as Giddome, Pterodo, GammaLoad, and GammaSteel.