The U.S. doesn't even consider it a crime. Read https://rewardsforjustice.net/rewards/foreign-malicious-cybe... and notice how the USG only cares if the hackers are acting under the direction of a foreign government. These days ransomware is about as illegal as corporate raiding and short selling.