We’re just naming threat groups from old Reddit usernames:
Our analysis attributes the email server compromise to the ScarCruft threat actor.
It would be funny except for the part that this was a North Korea group spying on a Russian missile contractor.