In early 2023, Baltimore's city systems were hit by a devastating ransomware attack perpetrated by the notorious APT group, RobbinHood. Over several months, key operations were hindered, causing widespread impact. The city made headlines with its controversial decision to refuse ransom payment, leaving systems crippled. Your mission is to delve into the intricacies of the attack, focusing on the exploitation of a vulnerable remote access tool, to piece together the attack chain and provide actionable insights.