It seems cyber criminals that are asked ransom money in bitcoin now switched to new crypto currencies.
There are currencies that are much more protected if it turns to investigation, like Monero, Zcash or Bitcoin.
Europol is saying this change can be observed since months, for example Kirk Ransomware asked for Monero
Criminals which are attack miners with java script, are asking for Feathercoin, Litecoin or Monero.
This java script goes unnoticed to video shares and browser games and start steeling money.
For Example last fall there was a fake Poloniex app in Google play store, which was actually a Trojan program.