By identifying reused code, researchers gained valuable insights about the “ancestral relations” to known threat actors or other campaigns.