The Russian cybercrime group attacked more than 180 organizations before members abandoned the brand and dispersed to new ransomware groups earlier this year.

Researchers say the wallets that received the large bitcoin payment are tied to BlackSuit affiliates.