First observed activity in December 2013.
No exploited CVEs have been attributed to this threat actor yet.