The attack featured a unique, multistage malware and a likely PulseSecure VPN exploit.
Source: Threadpost