"Having gained access to the infrastructure, reconnoitered the network, moved laterally through it, and exfiltrated all they want," Vectra's head of security analytics Chris Morales told SecurityWeek, "ransomware might be the final act of getting as much money as possible."