“The targeting of particular industries is now often pointing to particular malware gangs,” he explained to Threatpost. “Many gangs have become more specialized, targeting a specific industry that they have especially good experience and success in. To increase the chances of getting a potential victim to execute malware, the attacker has to make the social-engineering and phishing attack seem as close to an internal or partner communication, as possible. Specializing in a particular industry helps to do this.”