The notorious ransomware group exploited multiple vulnerabilities, including a zero-day, for at least eight weeks before alleged victims received extortion demands.
The emails, which are littered with broken English, aim to instill fear, apply pressure, threaten public exposure and seek negotiation for a ransom payment.
Richard Zhu, left, and Amat Cama celebrate one of their successes on the first day of the 2019 Pwn2Own competition in Vancouver. (Zero Day Initiative / YouTube)