I am sure Nigerian email scammers had a similar problem. At some point, there is maximum saturation of the market and no more victims left. Companies, individuals beefing up security, refusing to pay ransoms either by having it decoding by security researchers or having data backed up.