3299
Disheartened by Wosar 's success , the group behind Kovter switched to several ransomware variants in the following months , and eventually settled on renting and distributing Locky starting with October , as part of an affiliate scheme , splitting the ransom payments with the Locky crew .
 ransom: the ransom payments
Please tell me event type and its trigger word from given type options. Output format is "type: trigger".  Option: phishing, data breach, ransom, discover vulnerability, patch vulnerability 
Text: {0} 
Answer:
 ransom: the ransom payments