http://invest5xzhheh4car6bhk73ehosqbrwaank5i5tqt5lgz6fd2eicttqd.onion/usb-bitcoin/index11.html
One program called CryptoLocker, typically spread through legitimate-looking email attachments, encrypts the hard drive of an infected computer, then displays a countdown timer and demands a ransom in bitcoin, to decrypt it. Massachusetts police said they paid a 2 bitcoin ransom in November 2013, worth more than $1,300 at the time, to decrypt one of their hard drives.