The emergence of a strain of ransomware called Ymir may prove to be prima facie evidence of this.
Ymir's use of RustyStealer and its remarkably swift turnaround time has divided commentators over whether or not it acted independently or whether it collaborated with someone.
Despite continued sector focus, there's an interesting picture to paint when it comes to patterns of how threat groups operate.
The collaboration between threat groups and blurring of lines between criminal and state-sponsored activity creates a dynamic threat landscape.
Collection
[
|
...
]