Back

The chat around it is in the evening of 20 November 2023 if anybody wants to pull the logs, you can see them using it post purchase for the first time on a live victim org.

It was how they were getting from standard users to local administrator on Windows systems, goes on for months as a zero day.

And this is why we need to dismantle the ransomware economy, victims paying is just fuelling better weapons.