Observation: many of the entities paying for #WannaCry decryption have pretty big wallets.. In the range of 50 - 100 BTC no exception. Would that be the financial sector? Is somebody acting as a man in the middle (pay BTC ransom as-a-service)?
Here's 3 BTC addresses of perpetrators in case you'd like to follow along:
13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94
12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw
115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn
source: http://bit.ly/2qcy28S