Whenever I see large attacks like this, I always wonder exactly which ransomware is used by the attackers. It's interesting to see if it's an old tool or something new.