Where encryption was once the central aim of ransomware attacks, it has now been relegated to a supporting role, and data exfiltration has become the weapon of choice.