Table 2: Incident where PLEAD and KIVARS attack the same target    PLEAD Shrouded Crossbow Waterbear Samples found in same machine vmdks.exe  cfbcjtqx.dll tpauto.dll Timeline of infection 3/16/2017 2/23/2017 3/8/2017   Table 3: Incidents where PLEAD, KIVARS, and Waterbear were used on the same target