Comment by detaro

They require that the other people you infect pay the ransom, so you'd still have to pay for the VMs. (Also https://news.ycombinator.com/item?id=13147428 and replies)