Ransom note deployment
Named by 2 kept items in this workspace.
Search every workspace for Ransom note deployment. It matches the name as written, so it can find other things that share it.
The items that name it 2
Left a ransom note demanding Bitcoin with a Proton Mail contact, in a table named README_RANSOM; falsely claimed AES-256 encryption when the tool defaults to AES-128.
Attacker left a ransom note demanding Bitcoin payment and threatening to leak or sell stolen data
All techniques in this workspace.