A public feud has erupted between two ransomware groups, 0APT and Krybit, with 0APT threatening to reveal information about individuals associated with Krybit. This spat highlights the complexities of the ransomware ecosystem, where rival gangs often engage in sabotage and intimidation tactics. The fact that 0APT is willing to expose Krybit's affiliates suggests a high level of confidence in their own operational security, as well as a desire to disrupt their competitor's activities. State-aligned threat actors are often involved in these types of conflicts, which can escalate the situation from a simple criminal matter to a geopolitical issue1. The implications of this feud extend beyond the immediate target, as it may indicate a broader shift in the ransomware landscape. So what matters to practitioners is that this public spat may be a symptom of a larger, more complex threat environment that requires careful monitoring and analysis.