The corporate ransomware situation is playing out depressingly exactly as I predicted years ago.

You’ve got orgs secretly paying millions, attackers getting much better with huge budgets etc. For most orgs, organised ransomware is a bigger threat than APT groups.

It hasn& #39;t reached the & #39;endgame& #39; near by the way. The Rangarok one with Sophos is interesting as they had a zero day exploit completely unknown to vendor, and ransomware deployment using lateral movement and XP virtual machines (first time I& #39;ve ever seen that).

Basically those many (many) millions of dollars going to attackers really is creating a situation where ransomware groups are becoming the apex predator in cybersecurity - it& #39;s going to be a Big Problem.