Opportunistic actor that installs custom root certificate on victim to support man-in-the-middle network monitoring.
No exploited CVEs have been attributed to this threat actor yet.