The Interlock ransomware group, a dedicated non-RaaS actor, executed a multi-stage intrusion using NodeSnakeRAT/Interlock RAT implants and a zero-day process killing tool to disable EDR and exfiltrate/encrypt victim data. More information https://www.fortinet.com/blog/threat-research/interlock-ransomware-new-techniques-same-old-tricks
