Ss-bet-001_s.7z -

Restrict the use of administrator accounts and audit any use of built-in Windows tools for non-administrative tasks.

The actor uses the 7z.exe utility to compress and password-protect stolen data before exfiltrating it from the victim's network. SS-Bet-001_s.7z

Volt Typhoon (also known as Bronze Silhouette or Vanguard Panda). Restrict the use of administrator accounts and audit