603
Uncovered by researchers at Proofpoint , it 's believed to be the first scheme of its kind , with cybercriminals using a Tor proxy browser to carry out man - in - the - middle attacks to steal the cryptocurrency payments , which victims of ransomware are attempting to send to their attackers .
 victims: victim; ransomware: tool; their attackers: attacker; the cryptocurrency payments: payment method
Given event type and trigger, please tell me the arguments of all the listed option. Output format is "name1: role1; name2: role2". 
Event type: ransom 
  Option: victim, attacker, payment method, attack pattern, damage amount, tool, time, price, place 
Text: {0} 
Answer:
 victims: victim; ransomware: tool; their attackers: attacker; the cryptocurrency payments: payment method