other
Threat group to which msaRAT is attributed, deploying the RAT ahead of ransomware via an MSI-delivered lib.dll.
No evidence-backed relationships are recorded.
No current published clusters are mapped here yet.