Cuba ransomware group used Microsoft developer accounts to sign malicious drivers

The ransomware gang was able to use signed malicious drivers to disable endpoint security tools. Microsoft has revoked the certificates.