Big airline heist

Group-IB details the ColunmTK campaign against Air India, attributing the intrusion with moderate confidence to APT41; attackers used Cobalt Strike, credential theft (Mimikatz/hashdump), BadPotato privilege escalation, DNS tunneling (ns1/2.colunm.tk) and exfiltrated ~233 MB from multiple hosts, providing IOCs (IPs, domains, file hashes) and MITRE ATT&CK mappings to help detection and mitigation.