Microsoft Corp said it has taken control of web domains which were used by a hacking group called “Thallium” to steal information.

Thallium believed to be operating from North Korea.

Microsoft said in a blog post, and the hackers targeted government employees, think tanks.

University staff members and individuals working on nuclear proliferation issues also targeted.

Microsoft missed mobile dominance by ‘tiny’ margin: Gates

Most of the targets were based in the United States, as well as Japan and South Korea, the company said.

Thallium tricked victims through a technique known as “spear phishing”, using credible-looking emails that appear legitimate at first glance.

Microsoft said it now has control of 50 web domains used by the group to conduct its operations

A case filed against the hacking group in the US District Court for the Eastern District of Virginia, and a subsequent court order.

Thallium also used malware to compromise systems and steal data.

It is the fourth nation-state group against which the company has taken legal action, the company said.