Lots of opining about motives and reasoning for the shutdown, but this seems like the most likely scenario:

>“However, a strong caveat should be applied to these developments: it’s likely that these ransomware operators are trying to retreat from the spotlight more than suddenly discovering the error of their ways”