Virtual-Routes-Pharos-Report-Series-No.-3.pdf (4 MB)

This report provides a comparative analysis of ransomware use by groups linked to four states: Russia, China, North Korea, and Iran. Meanwhile, the evolution of North Korean activity reflects a focus on strategic and tactical financial gain. Iranian actors most frequently deploy ransomware for disruption, popular perception, and reputation, particularly targeting Israeli organisations.