606
However , one of the Tor gateways being used is altering bitcoin wallet addresses in the proxy , and redirecting the payment into other accounts , rather than those of the ransomware attacker .
 ransom: the payment
Please tell me event type and its trigger word from given type options. Output format is "type: trigger".  Option: phishing, data breach, ransom, discover vulnerability, patch vulnerability 
Text: {0} 
Answer:
 ransom: the payment