Link. "attackers installed 45 pieces of custom malware. The Times … found only one instance in which Symantec identified an attacker’s software as malicious and quarantined it".