Ransomware isn't always about the money: Government spies have objectives, too

This feature explains how state-backed APTs from China, Russia, Iran, and North Korea are increasingly using ransomware and wiper malware both as tools for espionage and as means of financial gain or disruption, citing cases such as RomCom/Cuba, Sandworm (GRU), ChamelGang, Moonstone Sleet, and Pioneer Kitten, and describing tactics like pre-encryption data exfiltration, ransomware-as-distraction, and monetization to fund state programs.