Will on X: "hxxp://159[.]223[.]134[.]12:81/new_style/xMbdNh.dll
hxxp://159[.]203[.]180[.]192:81/new_style/xMbdNh.dll
hxxp://143[.]244[.]153[.]27:81/new_style/xMbdNh.dll"
☣ FUD CargoBay (?) pre-ransomware tool spreading via BitBucket, posing as Zoom and Slack,
🔥C2
cloudstarsolution[.]com
ed650d73702436b6c004a650b412e97ec5acadf9c1a99265652a6dbca72c0ef5
9b7215231b3f4ff05723395f9c7ff756ad8d467a09d5e554a846d5de7deedc89