A Living Of the Land ransomware proof of concept using cipher.exe
This sript uses the cipher.exe to encrypt the C drive. The encryption key is easyly recoverable from the desktop. Ransomware using Cipher.exe might avoid most ransomware specific protections since no filenames are changed and encrypting many files is usual behavior for Cipher.exe