Motives are not fully clear, though data exfiltration is one possibility, Cisco Talos says.

from Dark Reading: https://ift.tt/2rgW5Df
via IFTTT