Someone's getting fired

from here

I know infosec pros tend to preach forgiveness for security fuck-ups by your users, but I don't think the same holds true for nation-state attackers. Someone inside India's Patchwork threat group infecting themselves with a remote access trojan was a pretty serious operational security failure and it's literally their job not to fuck that kind of stuff up.

Backups are looking real good all of a sudden

from here

As a general rule it's not a good idea to pay the ransom that ransomware operators demand because you're funding their criminal enterprise. But sometimes perhaps there's no other way to get the data back, so what other option do you have? Well, it turns out that if the ransomware is attributed to a group that has been sanctioned by the Treasury Department then paying the ransom isn't just undesirable, it's potentially illegal (in theory you may be able to claim you were under duress, but you may still have to go to court to use that defense).