Though Microsoft often reports on the ransomware campaigns it's monitoring, sometimes a competitor exposes activity of note. In this case, Google's exposed a group it's nicknamed "Exotic Lily" that's been using Microsoft's tools for nefarious purposes.