The Grief ransomware gang is threatening to delete victim’s decryption key if they hire a negotiation firm. Ragnar Locker has already claimed to publish a victim’s stolen data after they hired a negotiator. Grief gang is believed to be tied to a Russian hacking group known as Evil Corp, which the US government has sanctioned. It is not clear if DoppelPaymer is operated by Evil Corp (aka INDRIK SPIDER) or another group. The threat is likely also made for another reason, to evade US sanctions.”]