Mentioned as operator of DanaBot in CrowdStrike's 2020 Report.
No exploited CVEs have been attributed to this threat actor yet.