Two disruptive ransomware campaigns from 2019 show possible signs of Russian state involvement in choice of targets and timing -- and even in malware development