How to Track E-Crime Threat Actors

e-crime threat actors visit their significant others in extradition states it can go badly yeah so pro tip don't don't have a significant other in a country where you can be extradited or meet somewhere where it's a little bit more friendly for both of you this is like choose your own adventure here. TA 558 has been very fun to track because all of their different attack chains they mix in and bring back the old school CHM file types.