Coaxed into ransomware