The dangerous part of modern extortion is often not the encryption routine, but the remote-access foothold that lets operators come back, move quietly, and pressure victims from inside the network.