Introduction Ransomware no longer ends when systems are encrypted. Over the past years, threat actors have transitioned toward double and triple extortion, combining data theft, public leaks, and direct pressure…