A ransomware crew is reported to have leaned on Fortinet flaws and custom command-and-control while leaked Rocket.Chat messages added a second layer of intelligence, but not a clean attribution verdict.