: Internal software, scripts, and automation tools used for energy exploration and refining operations.

: Strategic planning documents, financial reports, and legal agreements. 2. Origins and Attribution

: While several groups have been linked to the breach, it is frequently attributed to ransomware-as-a-service (RaaS) groups that utilize "double extortion" tactics—stealing data before encrypting it to ensure payment.

Investigations by cybersecurity analysts and "deep posts" on technical forums have identified the following key aspects of this archive: 1. Contents of the Archive