The ransomware group is luring victims with ads, then attacking compromised systems with an expansive repertoire that includes cracked versions of the Cobalt Strike pen testing tool.
Article Link: BlackCat gang used Google and Bing search ads to push malware-laced dev tool | SC Media