The ex-hacktivist group is now fully involved with the ransomware-as-a-service market