Most high-profile ransomware groups were using the same Russian-based infrastructure for years ...
New Sophos research reveals how reused Windows images let bulletproof hosting providers spin up thousands of identical servers, obscuring ransomware attribution.