While the majority of zero-days in the past were used by APTs, this particular zero-day was used by a sophisticated cybercrime group #Nokoyawa that carries out #ransomware attacks. This group is notable for its use of a large number of similar but unique Common Log File System (#CLFS) driver exploit