Ransomware-as-a-service operations seek affiliates to infect victims with their own malware. These affiliates share a prearranged split of the ransom between the affiliate and the operator. In recent weeks, law enforcement officials and information security experts have been tracking a surge in activity from lesser-known players. The White House has put Russia on notice that if it won’t disrupt ransomware-wielding criminals operating from inside its borders, then the U.S. reserves the right to do so.”]
Source: https://www.cuinfosecurity.com/7-emerging-ransomware-groups-practicing-double-extortion-a-17384