“`html

Cybersecurity analysts have outlined the operations of a primary access facilitator (PAF) referred to as ToyMaker that has been seen providing access to dual extortion ransomware groups like CACTUS.

The PAF has been evaluated with moderate assurance to be a profit-driven threat entity, probing for susceptible systems and implementing a bespoke malware known as LAGTOY (also called HOLERUN).

“LAGTOY is capable of

“`