What to Do When a Ransomware Group Disappears

In some cases, police or federal agencies take control of the attacker’s servers. In other cases, the ransomware groups get scared and abandon their efforts, possibly from heightened media attention.