U.S. officials noted that ransomware groups are directing attacks toward firms involved in time-sensitive financial events, such as corporate mergers and acquisitions. The operators look for private and non-publicly available sensitive information to use during extortion. It is believed that this tactic could be adopted by other ransomware groups as well in the coming months.