US insurer CNA shares Phoenix CryptoLocker ransomware attack timeline

The ransomware operator obtained elevated privileges on the system via "additional malicious activity" and then moved laterally through CNA's network, ...