APT groups are increasingly deploying ransomware – and that’s bad news for everyone

The article outlines a rising trend of state-aligned actors adopting ransomware—for revenue generation, to conceal espionage, and to remunerate or outsource government-affiliated hackers—illustrating the shift with historical cases (WannaCry, NotPetya) and recent observations (North Korean, Iranian and China-linked groups). It highlights operational overlap between nation-state and criminal actors, consequent increases in risk to organizations, and lists defensive best practices such as MFA, network segmentation, continuous monitoring, backups, and incident response preparation.