Ransomware known as CrypVault acts as though it is antivirus software, encrypting files and overwritten using Microsoft’s SDelete. When victims try to open their files, they see a ransom note demanding payment of $1,000. The ransom messages appear to be in Russian, which may not be aimed at potential victims in North America or Europe. The malware is also noteworthy because of how difficult it is for users to recover their files with an estimated 16 overwrite passes with SDelete.”]