0950.rar Site
Microsoft tracks this group, which overlaps with FIN11/TA505 and has been known to use Raspberry Robin for post-compromise activity leading to Clop ransomware.
This group is associated with the Cl0p extortion site and exploits zero-day vulnerabilities (like in PaperCut servers) to steal data. 0950.rar
A Swedish company, Rasi Maskinfabrik , lists a phone number ending in 0950 . Microsoft tracks this group, which overlaps with FIN11/TA505