Reports suggest that Ryuk ransomware was used in the attack on Tribune Publishing which ended up impacting others. This is already being used in reporting to tie the attack to North Korea government operations. While possible there’s way more nuance required. Let’s explore: