LoFiSe has been used by ToddyCat since at least 2023 to identify and collect files of interest on targeted systems.
View MITRE record ↗
