It is an extremely damaging ransomware software that, due to the speed with which it can encrypt data and spread to other systems. It uses up to 32 individual logical threads, making it faster than most ransomware. The method of delivery is not clear. The same group has operated the Ryuk ransomware. The group is known as Wizard Spider and is based in Saint Petersburg, Russia.