A notable escalation in ransomware activity has emerged as 0APT and KryBit groups engage in a public feud, with each faction doxxing the other online. This unusual display of hostility between rival groups suggests a deeper level of competition, potentially driven by state-aligned interests. The 0APT group, known for its sophisticated tactics, has been involved in high-profile attacks, while KryBit has also demonstrated significant capabilities. The doxxing effort, which involves publicly releasing sensitive information about the opposing group, indicates a desire to disrupt and destabilize the other's operations. This development raises concerns about the potential for ransomware attacks to be used as a tool for geopolitical leverage, complicating the threat landscape for organizations and governments alike1. The implications of this turf war extend far beyond the immediate targets, as state-aligned threat activity can have far-reaching consequences for global cybersecurity.