Threat actor adds advanced ‘EDR killer’ tools to ransomware-as-a-service platform