Tagged ransomware attack