Flashpoint conducted linguistic analyses of ransom notes found within the WannaCry malware to determine the native tongue of the author(s).