New zero day “similar to proxylogon” used in exchange attacks.

Brute Ratel has been cracked, and will likely replace Cobalt Strike imminently.

A new dropper unloads a dozen infections, some of which are droppers themselves.