TI Update: Conti & Exotic Lily
Exotic Lily is a financially motivated threat actor first spotter in September 2021. Now it appears they are a Initial Access Broker for russian ransomware gang FIN 12 aka Wizard Spider.
Sources: https://blog.google/threat-analysis-g...
Crowdstrike: https://adversary.crowdstrike.com/en-...