The cybercriminal group, which said it's releasing its decryption tools to victims, may be transitioning to new infrastructure under a different name.