Blackcat is a super sophisticated hacking group too: https://www.trendmicro.com/en_us/research/23/e/blackcat-ransomware-deploys-new-signed-kernel-driver.html

Update: In February, and as reported by Bleeping Computer at the time, Reddit disclosed a phishing attack that seems to align with BlackCat claims of the time frame and phishing attack.

Ruh-Roh!