The executable uses 'Sophos' in the ransom notice and the '.sophos' extension for encrypted files
'Fully undetectable' backdoor cannot be discovered by any security tool on VirusTotal and seems to have been developed by a skilled actor
One sample appears to be the same piece of malware which the US agencies warned about in May
Backstory is a cloud-based platform capable of analysing network data and comparing it with malicious cyber activity