There is probably a reason for this, the carriers start blocking these, so they have to break the words so they bypass those blocks.

We had these in Finland two years ago, it originates probably from Russia, so we are their sandbox for these kind of cyber shit. Our carriers found out some way to block them and they are not anymore happening. One day our cyber security center just informed that they have co-operated with carriers to block them permanently. I believe the technique is not made public.

Edit: did some digging, so it was keyword based blocking in the network + Europol raided the servers which commanded the malware