We see an actual campaign against #womenshelters in Germany. The ******** uses an #Commieloader which does #dll_side_loading via #sumatrapdf to deploy #cobaltstrike An detection-scanner is provided. https://srlabs.de/blog/erpressungswelle-auf-frauenhaus #threatintel #ccc #haecksen