I think there might be a critical mass of great people forming here. Now to see if the content follows. I’ll start a thread.

Just after the Ukriane invasion I noted publicly that ransomware was diminished because post-sanctions and after western business pullouts (ie credit cards), criminals were having a hard time purchasing infrastructure and getting their cryptocurrency converted out of the exchanges. At this point, the Russian based criminal ecosystem has seemed to have found workarounds and recovered. I think new entrants are still suppressed but the hardcore elements have addressed their needs. The dip in operations is gone.

Anyone else seen similar or have other related observations?

@RGB_Lights We saw a drop in activity for about 6 weeks following 24 Feb and then it resumed to normal or even higher levels. I don't think sanctions played as much of a role as Ukrainians no longer playing a role in their supply chains and other issues with people looking out for their own health and freedom during the initial chaos.