Ransomware is not generally being used by nation-states, says Joram Borenstein, vice president of marketing for NICE Actimize. Email phishing messages are still the most common method of ransomware distribution. The more devices they infect, the more ransoms they get, the better. The logistics of operating a ransomware scheme are not too challenging anymore. Bitcoin is the main go-to currency for ransom — largely because of the anonymity it provides — some criminals are providing victims with a wider variety of payment options.”]
Source: https://www.darkreading.com/attacks-breaches/ransomware-getting-easier-for-both-bad-guys-victims