The Darkside Ransomware-as-a-Service takes an automatic 15% cut of the Bitcoin transaction from any payment obtained by an affiliate.

Darkside understands Bitcoin business models better than everybody in BTC.