The group is using ransomware intended to make its espionage and destruction efforts appear financially motivated.
Threatpost