Ransomware crew mined crypto in Colombia before encrypting (intelfusions.com)
Colombia's national CERT pulled apart an intrusion where the attackers quietly mined cryptocurrency on the victim's machines before encrypting them. The encryptor itself looks like parts of three different ransomware families bolted together.