anything untraceable is too enticing for insiders. the only way to shift this dynamic is to let everyone know that the companies that are hit are rife with rats eating investor value by using anonymous means to transfer wealth from company to insider. let them figure it out. in the mean time, unless proven otherwise, I'd treat all ransomware jobs as insider jobs.