misp:tool="misp-scraper",osint:source-type="blog-post",misp:event-type="collection",tlp:white,misp-galaxy:banker="Qakbot",misp-galaxy:malpedia="Cobalt Strike",misp-galaxy:mitre-tool="BloodHound - S0521",misp-galaxy:mitre-tool="AdFind - S0552",misp-galaxy:mitre-intrusion-set="FIN7",misp-galaxy:mitre-tool="cmd",misp-galaxy:financial-fraud="Phishing",misp-galaxy:malpedia="SocksBot",misp-galaxy:malpedia="SystemBC",misp-galaxy:mitre-ics-tactics="Evasion",misp-galaxy:mitre-ics-tactics="Execution",misp-galaxy:mitre-ics-tactics="Initial Access",misp-galaxy:rat="Netsupport Manager",misp-galaxy:mitre-attack-pattern="DNS - T1071.004",misp-galaxy:mitre-attack-pattern="PowerShell - T1059.001"