A regular user was attacked with encryption ransomware on average every 10 seconds, with an organization somewhere in the world hit around every 40 seconds. In most cases crypto ransomware has a Russian origin, says Kaspersky Lab. 47 of the 60+ crypto ransomware families weve discovered in the last 12 months are related to Russian-speaking groups or individuals. This is because there are a lot of well-educated and skilled code writers in Russia and its neighboring countries. The Russian cybercriminal underground has the richest background when it comes to ransomware schemes.”]
Source: https://securelist.com/a-look-into-the-russian-speaking-ransomware-ecosystem/77544/