A new email campaign from the threat group uses the attack-simulation framework in a likely leadup to ransomware deployment.
Source: threatpost.com