Who's the bossware? Ransomware slingers like employee monitoring tools, too

Net Monitor allows users to customize the service and process names, and the intruder took advantage of this to disguise the agent as Microsoft OneDrive, registering the service as OneDriveSvc, naming ...