Re: "the cybergang at arms is under US financial sanctions"
Having done so before the attack would have, I assume they've extracted what they want by now.
Having done so before the attack would have, I assume they've extracted what they want by now.