It is, at least, search engine awareness. Looking for "forust" in Google and the company is the first result. Try looking for "forest"

He said "donations". Brazil is paying (and begging to receive what is being paid). I dont know about the others.

Thats a DOS. Not a DDOS.

I'm not sure about how the file system management really works, but I think your cenario is only true if the ransonware creates all encrypted copies and THEN delete all original files. Because if each original is deleted after the encrypted copy is created, how are you so sure that the file management routines are NOT going to use the recently freed sectors to store the new file? On a spinning disk?

Brazil? Not all. I have a Bradesco personal ("Pessoa Física") account, java is disabled on my browser and I use Internet Banking normally. As of now, Bradesco is the second largest private bank in Brazil. I think the problem is mostly with the state owned banks.