Feds claim sinister sysadmin locked up thousands of Windows workstations, demanded ransom

A former infrastructure engineer allegedly locked IT staff out by deleting domain administrator accounts and changing hundreds of user passwords, disrupted dozens of servers and thousands of workstations, and threatened to shut down 40 servers per day unless paid; prosecutors say he used Windows command-line tools and Sysinternals PsPasswd (reusing the password "TheFr0zenCrew!") and has been arrested and charged with extortion, intentional damage to a protected computer, and wire fraud.