Initial Tactics
Although the group initially adhered to traditional ransomware tactics, techniques, and procedures (TTPs) prior to making the ransom demand, it deviated from its standard approach when it started issuing threats to the group and elaborating on the potential repercussions the victim could encounter.
Source Link