Attacks using this ransomware have displayed consistent TTPs and grown steadily since 2023.