I thought this was a really interesting look at the commercial end of ransomware. Clearly shows that as an attack class it's not going anywhere for the time being and it'll just be a growing issue. With the amounts of money being made, you can also expect increasing sophistication as it'll make financial sense to invest. The comments about targeting companies with insurance were also interesting. I guess it's a smart…
Insurance companies are often a mix of care and greed. I think a boutique insurance brokerage for ransomware might do very well if they drive changes in the client's operations through their exclusion clauses and fee structures. Find a bank or finance house willing to underwrite such an operation, perhaps with the possibility of a fat consultancy income stream to go along with it, and there is money to be made.