600
A Tor proxy service is being used by crooks to divert ransom payments to their own accounts at the expense of ransomware distributors -- and their victims , according to security researchers .
 crooks: attacker; ransomware distributors: attacker; their victims: victim; A Tor proxy service is being used: attack pattern
Given event type and trigger, please tell me the arguments of all the listed option. Output format is "name1: role1; name2: role2". 
Event type: ransom 
  Option: victim, attacker, payment method, attack pattern, damage amount, tool, time, price, place 
Text: {0} 
Answer:
 crooks: attacker; ransomware distributors: attacker; their victims: victim; A Tor proxy service is being used: attack pattern