Security researchers linked Jaff ransomware campaigns to the backend infrastructure used by operators behind a black market. The black market offers compromised records for bank accounts most located in the United States, Germany, France, and Spain. Prices for the compromised accounts range from under $1 to several bitcoins, depending on the specific item. The discovery made by the experts at Heimdal Security confirms that hackers diversify their operations in order to maximize profits. It can happen that we will see these two models combined, with data breaches becoming accompanied by subsequent ransomware attacks.”]
Source: https://securityaffairs.co/wordpress/59702/cyber-crime/jaff-ransomware-black-marketplace.html