Ransomware-as-a-service operations typically involve operators who develop and supply their crypto-locking malware and affiliates. For every victim who pays, an affiliate will often receive 70% of the payment, while the rest goes to the operators. Coveware CEO Bill Siegel says: “The trend is not surprising, but as you can see from the duration of the chart, it is subtle over time and not something you can draw inferences from, quarter to quarter” In Q1 of 2019, in Q1 victims paid an average of $211,529, down 34% from the previous quarter.”]
Source: https://www.cuinfosecurity.com/blogs/ransomware-payments-just-46-victims-now-pay-ransom-p-3225