I've been tied up the last few days, so I missed this thread update. John is mostly correct in his assertions, as is Marc. The way the ransomware is propogated, the Aholes who host it do everything to conceal/provide false trails to it's origin. In many cases, they claim "Russian hackers", even...