Re: the Nobelium gang
"But attacking hospitals for money should mean a bullet in the head. No pity there."
Completely agree. But health institutes/companies are heavily at risk for 2 reasons, and therefore a low hanging fruit for cyber-criminals:
- their security posture/competencies are *very* weak
- they have strict compliance requirements for securing data
Thus, a ramsomware attack is both easy to perform and has many chances of success.