In this training scenario, participants will dive into the infamous WastedLocker ransomware attack orchestrated by Evil Corp that crippled Garmin's operations. The attack not only demanded a staggering $10 million ransom but also highlighted vulnerabilities in aviation services, raising significant concerns about sanctions evasion. Trainees will follow the digital breadcrumbs left by the attackers, piecing together the sophisticated tactics, techniques, and procedures that led to one of the most notable cyber incidents of recent times.