RansomwareMicrosoft names Storm-2570, the affiliate hopping between Qilin, DragonForce and other ransomware crews
The same intruder, the same toolkit, four different ransom notes. Microsoft says defenders who chase payloads keep missing the person behind them.