> which doesn't require much in the way of bleeding edge technology They did runtime level attacks and (then) novel exploits which SentinelOne co-published wit

> which doesn't require much in the way of bleeding edge technology They did runtime level attacks and (then) novel exploits which SentinelOne co-published with Reuters, but they took the article down due to the same lawsuit Reuters faced. Here's the web archive of the original article - https://web.archive.org/web/20231117061038/https://www.sentinelone.com/labs/elephant-hunting-inside-an-indian-hack-for-hire-group/ https://web.archive.org/web/20231117061038/https://www.senti... Also do NOT underestimate spear phishing - the social engineering aspect is just a Trojan for the actual payload which is almost always malicious. Being able to transmit a malicious payload without being flagged by an email provider or an EDR takes a lot of technical effort.