Vatican Embassy Iraq – January 10, 2012 an email was sent to employee at embassy with news of bombing that happened day before. The email had a document enclosed, “IDF_Spokesperson_Terror_Attack_011012.doc”[i]
[i] Trend Micro, Operation Pawn Storm: Using Decoys to Evade Detection”,October 2014, https://www.trendmicro.de/cloud-content/us/pdfs/security-intelligence/white-papers/wp-operation-pawn-storm.pdf?_ga=2.206814867.1491906624.1589106916-2053192455.1589106913