The cybersecurity expert MalwareHunterTeam: The group shut down them before encrypting files to prevent them from being locked and to avoid data corruption.
Since at least one day, all the websites for the ransomware operation are offline. The cybersecurity experts: Maybe the malware group start feeling the pressure.
US, South Korean and Ukrainian law enforcements shut down the infrastructure and seized the servers. Egregor, NetWalker and Emotet suffered the same fate.