In the same year, Poison Ivy powered a coordinated attack dubbed "Nitro" against chemical makers, government offices, defense firms, and human rights groups. The FireEye report identifies several ongoing nation-state threat actors currently using Poison Ivy, including: admin@338: Active since 2008, this actor mostly targets the financial services industry. FireEye has also observed activity from this actor in telecom, government, and defense sectors. th3bug: First detected in 2009, FireEye has observed this actor targeting a number of industries, primarily higher education and healthcare. menuPass: Also first detected in 2009, FireEye research suggests that this actor targets U.S. and overseas defense contractors.