An EDR killer Sophos X-Ops has tracked for three years continues to bedevil organizations targeted by ransomware gangs.