The cybercrime group targeted infrastructure and persons of interest, encrypting their data and demanding cryptocurrency in exchange for decryption.