https://www.intrinsec.com/ip-cluster-linking-ransomware-activity-and-eye-pyramid-c2/?cn-reloaded=1