U.S. military acknowledges targeting cybercriminals who launch attacks on U.S. companies.
https://threatpost.com/cyber-command-ransomware-groups/176801/
The APT28 (Advanced persistence threat) is operating since 2009, this group has worked under different names such as Sofacy, Sednit, Strontium Storm, Fancy Bear, Iron Twilight, and Pawn.
https://threatpost.com/microsoft-takedown-domains-ukraine/179257/