A ransomware post tied to Trra-Aventura offers a named actor, a long hash value, and almost no verification, which is exactly the kind of thin evidence defenders should treat with caution.