Most of the large-scale botnet and ransomware activities are operating out of Russia. Not exactly a country that is going to collaborate with US law enforcement.