"Dissecting .NET ransomware: key generation, encryption and operation" by Pranshu Bajpai and Richard Enbody, published in February 2020, provides a technical analysis of ransomware development within the .NET framework. The paper outlines the attack lifecycle—from delivery to file encryption—and details the use of a hybrid cryptosystem, combining symmetric and asymmetric keys. Read the full paper on ScienceDirect .