Threat Bulletin #181
Lockbit switches to abusing Windows Defender as Cobalt Strike loader. Raspberry Robin possibly linked to EvilCorp. Gootkit reappears with new infection vectors. Suspected Darkside rebrand BlackCat learns nothing, attacks gas pipeline.