It was a tranquil diplomatic network until somebody tried to exfiltrate several gigabytes of data. Then, an APT attack was uncovered… and when we were ready to expel him, a malware revealed the presence of another advanced actor. This is a tale of a very complex case involving two attackers, one investigative team and a short amount of time to solve the puzzle. Not for faint hearted!