And ransomware mimicking other ransomware. The mimicry doesn't even have to be perfect, if it's good enough to provide the impression that "CryptoVault 3.2" only decrypts your data occasionally, after you pay.