PAYLOAD ransomware hijacked Active Directory GPOs to push ransom notes, wallpaper changes, logon banners, firewall cuts, and data theft across a Middle East manufacturing firm, without a Windows encryptor. #ActiveDirectory #SYSVOL #MiddleEast