They have for a long long time. Remember "NotPetya" or Colonial Pipeline / "DarkSide". It's a businessmodel im emerging markets countries. And their goverments must walk the line between not reacting to it because they like the net money inflow and acting as if they did something to look helpless instead of malicious.