Rebranding and restructuring their operations allowed some ransomware syndicates to strengthen anonymity amid Western sanctions.