Gray-box engagements endeavor to simulate a situation in which a hacker has already penetrated the perimeter, and you would like to see just how much harm they might do should they got that considerably. To put it briefly, it's a company to make a malware as destructive as you can. Hacker community forums are full of crypting support threads. Just