value:  Once they had infected the computers of the personnel in charge of cash transfer systems or ATMs, the attackers collected snapshots of victims’ screens and studied their daily activities in the bank. 
name: Gather Victim Org Information: Identify Business Tempo