The APT known as TA410 has added a modular remote-access trojan (RAT) to its espionage arsenal. The RAT, called FlowCloud, can access installed applications and control the keyboard, mouse, screen, files, services and processes of an infected computer. Utility providers received training- and certification-related emails with subject lines such as PowerSafe energy educational courses (30-days trial) The malware first scurried onto the scene last summer as part of a spear-phishing campaign.
Source: https://threatpost.com/espionage-group-utilities-spy-tool/156425/