The article lists the malware family as Sakura but the breaches appear to involve to a RAT called Sakula. [1] There does appear to be an exploit kit named Sakur

The article lists the malware family as Sakura but the breaches appear to involve to a RAT called Sakula. [1] There does appear to be an exploit kit named Sakura, but it not associated with any APT campaigns. 1. https://www.crowdstrike.com/blog/ironman-deep-panda-uses-sakula-malware-target-organizations-multiple-sectors/ https://www.crowdstrike.com/blog/ironman-deep-panda-uses-sak...