I work in infosec doing defensive stuff. I am not worried about ransomware in the least, at least not on its own, the thing you have to understand is, when all

I work in infosec doing defensive stuff. I am not worried about ransomware in the least, at least not on its own, the thing you have to understand is, when all these companies get a ransomware attack, it isn't always a resuly of the ransomware worming its way through computers. These days operators manually find lateral movement paths and get domain admin and deploy the ransomware using GPO or something. Bare minimim compliance to Microsoft tiered security model prevents most of these attacks and there is a lot you can do to prevent this. Sabotage attacks don't worry me. I hope the bad guys don't read this but what worries me is targeted intrusions where the bad guys do corporate espionage and IP theft but use ransomware as a smokescreen. 10K filings, product announcements. Heck, sit silently on the right guy's inbox and you can do your own insider trading scheme and it pays more than ransomware. To me ransomware is like holding up a bank but you only take the cash in cash registers, rob everyone in the lobby and create a commotion and down time for the bank and leave. Don't get me wrong? I think ransomware will continue to be popular, I am just not that concerned because the team i am on takes adequate measures to stop your run of the mill ransomware gang.