On 2022-03-28, a campaign was reported, involving Muhstik operator, gaining initial access via ,.