The NBA's Houston Rockets were hit by a ransomware attack earlier this month. Now it's the Washington, D.C., police department. The common thread is a ransomware group called Babuk, which was unknown and likely didn't exist until it began posting on the dark web early this year.
This group is just one of many that reflect the proliferation of ransomware outfits that are increasingly sophisticated, specialized and largely beyond the reach of law enforcement.
In short, the cybercriminals have the upper hand, while U.S. authorities and those targeted are struggling to keep up, according to cybersecurity experts.
"There are certainly cases where people have been caught for running ransomware attacks, but it seems like it is a pretty small minority," said Ryan Olson, vice president of threat intelligence at the cybersecurity firm Palo Alto Networks. "It doesn't seem like there's a high likelihood of a ransomware attacker today ending up in handcuffs."