"There are tens of thousands of 'accounts' for sale," on sites like Genesis, says Dan Woods, a security researcher at F5. "I would be surprised if it hasn't already been used to enable, directly or indirectly, many ransomware attacks."