2614
Attackers have their own website Two ransom notes have been found in the hundreds of confirmed attacks , one asking victims to get in contact via email and confirm the payment , while the other used a completely different mode of operation , redirecting users to a Tor - hosted website .
 ( ransom: attacks,  ransom notes: tool) 
Locate the role in the text that participated in the event based on the event type and return it in the event list. 
 Option: Event type: phishing, data breach, ransom, discover vulnerability, patch vulnerability, Arguments type: vulnerable system, capabilities, vulnerability, number of victim, issues addressed, compromised data, damage amount, common vulnerabilities and exposures, victim, patch number, number of data, tool, discoverer, time, purpose, place, payment method, releaser, vulnerable system version, attacker, supported platform, patch, price, vulnerable system owner, trusted entity, attack pattern. 
Text: {0} 
Answer:
 ( ransom: attacks,  ransom notes: tool) 