Tomiris was discovered while investigating a series of <DNS hijacking> attacks targeting several government zones of a CIS member state between December 2020 and January 2021, which allowed the threat actors to redirect traffic from government mail servers to machines under their control