I suspect most of these ransomware operators have the support of some government which turns a blind eye in return for a cut. There's not much value in tracking the BTC payments back to the same damn Russian bank who never seems to have any "evidence of such activities".