Ransomware was actually my first guess as well.