It could work if we’re talking state-sponsored hackers.

North Korea is well-known for that, although I’m not sure about ransomware, and I wouldn’t be surprised if Russia were into it too now.