"DevilTongue" Suricata IDS (https://suricata.io/) signatures. More information is avalible at https://microsoft.com/security/blog/2021/07/15/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware/