These moonlighting hackers are using ransomware against 'random' targets

But is it state-sanctioned ransomware or hackers working for profit?