When ransomware actors identify potentially vulnerable systems, then other affiliates are likely to hit similar targets – vulnerabilities attract targets and Conti proved more than one Costa Rican public sector was vulnerable.

Groups are also likely to target sectors such as healthcare, which will yield them the greatest likelihood that ransom payment will be made due to the importance and criticality of systems