Spain (27%) and the US (24%) were the nations with the most active infections via the attack campaign. Half the attacks were in energy and 30% in energy control systems, followed by file hosting services and “unidentified” targets. The attacks are the handiwork of a nation-state backed hacking group called DragonFly, a.k.a. Energetic Bear, according to Symantec. The group has in their arsenal malware that could be used to sabotage or disrupt the operations of their victims.”]
Source: https://www.darkreading.com/advanced-threats/cyberspying-campaign-comes-with-sabotage-option