person
Jamf Senior Threat and Detections Researcher quoted explaining the malware's use of Finder's duplicate to reach otherwise gated files.
No current published clusters are mapped here yet.