The threat actors are connected to Russian cybercriminals. According to Sophos X-Ops, the campaigns involve separate groups of threat actors abusing the Microsoft Office 365 platform and remote ...