Dragos clustered the related intrusions and named the associated threat actor Xenotime; this identifies the activity group but does not establish a national attribution.
ExplicitConfidence 94% · Jack RhysiderEP 68Details
“they created a name for the threat actor and called them Xenotime.”