– Many jurisdictions classify the creation, distribution, or facilitation of ransomware as a criminal act. Possession alone can be interpreted as intent to commit a crime, especially if the individual cannot demonstrate a legitimate research purpose.