The recent decline in ransomware attacks suggests that targeted sanctions, consistently and internationally applied, may degrade the ability of cybercriminals to mount ransomware operations.