Has anyone implemented countermeasures against the business email compromise campaign targeting healthcare providers?

The C2 infrastructure leverages AppInit DLLs to evade SIEM controls. We've analyzed samples from this campaign and found regsvr32 abuse being used to bypass network. This threat actor typically...