Storm-2570

Storm-2570 brings the same intrusion toolkit to Qilin, DragonForce, Anubis and BERT attacks

Microsoft says affiliate Storm-2570 has run the same remote access and exfiltration tools whether it deploys Qilin, DragonForce, Anubis or BERT ransomware. Detections built on those tools can catch the operator before any payload runs.