(TR20) (FIC) Are ransomware groups too greedy to last?

Ransomware groups are similar to criminal gangs: they get rich quick, live fast and eventually self-destruct. Lockbit’s builder was leaked in September after the leader of the collective refused to pay a developer their salary. Babuk’s builder was suddenly found online after one last job against the Washington police. Revil’s activity dropped dramatically after the attack on the Colonial Pipeline. Not to mention Conti, which self-sabotaged by siding with Russia in the Ukraine invasion. These rises and falls raise questions about ransomware groups’ lifespans. Can these gangs last?