Ransomeware is problematic, and horrific if it gets you but I think if we think a pout what makes the threat actor the actual actual threat is “malicious IT businesses” especially from rouge nation states.
Distribution of your Denial of Service is just cheating … a good attacker crafts his or her DoS in artisanal small batches and releases when they are good and fresh using no more than three computers…(containers are ok I suppose)