A six-year ransomware campaign has been targeting Turkish homes and small to medium-sized businesses, flying under the radar due to the lack of reporting on smaller incidents. This campaign has been able to persist with minimal disruption, allowing attackers to continue exploiting vulnerable systems. The fact that these smaller incidents are under-reported has contributed to the campaign's longevity, as it has not garnered the same level of attention as larger enterprise breaches. The attackers have been able to operate with relative impunity, highlighting the need for increased awareness and reporting of cyberattacks among smaller organizations. This campaign's persistence is a concern, as it indicates that attackers can continue to exploit vulnerabilities with minimal risk of detection1. So what this means to practitioners is that they must be vigilant in monitoring their systems for signs of ransomware, even if they are not a high-profile target, as these types of campaigns can have a significant impact on smaller organizations.