CTU analysis of one of GOLD KINGSWOOD's campaign using SpicyOmelette (DOC2018.js) exposed additional sophisticated methods to compromise targets. Depending on the security profile of the victim's system, a pop-up notification may have warned about running external content