Ransomware infection that hit Chicago-based Tribune Publishing disrupted U.S. newspapers in December 2018. Some media outlets cited Ryuk’s reuse of Hermes code as evidence that the Democratic People’s Republic of Korea had hacked America’s newspapers. Some researchers say all evidence points not to online espionage teams but financially motivated cybercriminals operating from Eastern Europe. Ryuk is not one of the extremely high-profile and highly problematic decryption tool, a Ryuk attack can be fatal, experts say.”]
Source: https://www.cuinfosecurity.com/11-takeaways-targeted-ryuk-attacks-pummel-businesses-a-12040