 Research conducted by FireEye in 2018 suggested that APT35 may be expanding their malware, and solidifying their campaigns.The group has since been known to use phishing to impersonate company websites, as well as fake accounts and fake DNS domains to phish users' passwords.In 2013, former United States Air Force technical sergeant and military intelligence defense contractor Monica Witt defected to Iran knowing she might incur criminal charges by the United Stages for doing so.