GitHub & Dropbox Weaponized: “Defendnot” Tool Used to Disable Windows Defender

### Executive summary FortiGuard Labs uncovered a sophisticated multi-stage campaign targeting users in Russia that leverages social-engineered business documents, abuses the Defendnot research tool to disable Microsoft Defender, and uses GitHub and Dropbox to host modular components; attackers deploy Amnesia RAT for long-term access and end with ransomware/WinLocker to destroy data.