Is "Criminal organization decides to create damaging ransomware" really so substantially different from "Criminal organization (known as the Russian Federation) decides to create damaging ransomware" that Zurich actuaries can earnestly predict the likelihood of one but not the other?

I assert that the line between cyberwar and cybercrime is very faint.