You could look at it as an unsolicited security audit of your system and the ransom as a contractor's fee for a job well done.