Ransomware attacks decrease, operators started rebranding