While there isn't any specific information as far as how Ryuk ransomware has changed over time, we do know that its source codes have been leaked online early last year due to a third-party RDP service being hacked into. This means that the threat actors behind this malware now have access to this specific code which has allowed them to create their own version of it.
As mentioned earlier, victims are told that they must pay 1 Bitcoin if they ever want to gain access to their files again and based on the data we have gathered from those who paid; you will most likely receive a standard key. This is because those responsible for creating the ransomware merely copied the code as opposed to adding any additional changes such as unique encryption keys included in each individual infection. This means that all victims will experience similar results after paying which could lead some individuals never wanting to pay these attackers a single cent in the future.
There is still no confirmation on how much money these criminals behind this attack made but according to our research, many users chose not to pay the Bitcoin fee considering that their files were unlikely to be decrypted a second time.