Russian law enforcement is estimating that the bad guys could have raked in as much as $1 billion. 10 cybercriminals, each getting a cut of a ransom between $10 and $30 even though they were paying out $3 per infection to the people willing to spread this malware. Phone service providers and content providers are also heavily implicated in the Winlock case. Most of the victims are in former Soviet-bloc countries, where its very easy to register a premium pay number.”]
Source: https://securelist.com/the-winlock-numbers-the-winlock-laws/29624/