Operation Layover: How we tracked an attack on the aviation industry to five years of compromise

The threat actor is based out of Nigeria and doesn't seem to be technically sophisticated, using off-the-shelf malware since the beginning of its activities without developing its own malware.