According to the Root9B, preparations for the attacks started in June 2014 and the malware used "bore specific signatures that have historically been unique to only one organization, Sofacy."
Podle společnosti Root9B přípravy na útok začaly v červnu 2014 a použitý malware "nesl specifické znaky historicky jedinečné pro jedinou organizaci, Sofacy".