In recent years the group has compromised organizations in the U.S., Europe, and Japan.

“They’re not five years behind nation-states anymore, because the tools have become more ubiquitous,” Grant Schneider says.

The notorious ransomware forced the FBI to rethink how the bureau tackles cyber investigations.

“It’s an industry that has fed and continues to feed, to a large extent, off of fearmongering,” Tenable CEO Amit Yoran told CyberScoop.

Analysts poring over Ryuk are coming to different conclusions, highlighting the subjective side of cyberthreat studies.

The hack of Visma was done by APT10, according to Recorded Future and Rapid7. Or was it? Other researchers say it had all the hallmarks of another China-linked group, APT 31.