The ransomware coins cannot be used, if they move the coins to other exchanges it will be confiscated, it was just a dumb move by the hackers.