Mentioned as MaaS operator in CrowdStrike's 2020 Report.
No exploited CVEs have been attributed to this threat actor yet.