A fresh victim page raises a familiar ransomware question: what is verified, what is asserted, and what remains unproven.