Zoho Assist (195b0821-a81f-43c5-b9cb-05e9ee0dd5ac)

Zoho Assist is a legitimate administration tool that multiple prominent adversaries have abused to carry out remote activity on victim systems.^{[Sygnia Luna Moth July 1 2022]}^{[U.S. CISA LockBit Citrix Bleed November 21 2023]}^{[Unit 42 9 15 2023]}

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Zoho Assist (195b0821-a81f-43c5-b9cb-05e9ee0dd5ac)	Tidal Software	LockBit Ransomware Actors & Affiliates (d0f3353c-fbdd-4bd5-8793-a42e1f319b59)	Tidal Groups	1
Zoho Assist (195b0821-a81f-43c5-b9cb-05e9ee0dd5ac)	Tidal Software	Luna Moth (cca12ba9-f65f-4a29-87ab-a9fc0f99521f)	Tidal Groups	1
Zoho Assist (195b0821-a81f-43c5-b9cb-05e9ee0dd5ac)	Tidal Software	Scattered Spider (3d77fb6c-cfb4-5563-b0be-7aa1ad535337)	Tidal Groups	1