Even ransomeware authors accidentally infect themselves and lose keys.

It's a means to detect sandboxing, either for testing or to foil analysis attempts by third parties.