This suggests that Spearwing works with a small number of affiliates and provides them with a playbook as to how the attacks should be carried out and the attack chain to use. Symantec highlighted a ...