Power Rankings: Ransomware Malicious Quartile Q4-2024

This report argues that ransomware has evolved beyond financially motivated crime into a geopolitical instrument—particularly used by Russia-aligned actors—to disrupt critical infrastructure (healthcare, energy, food supply). Using the 2024 Stoli Group ransomware incident and Chainalysis data as examples, it calls for reclassifying targeted ransomware attacks as national security threats and recommends offensive cyber measures, sanctions, and strengthened international collaboration.