Bitcoin payments in DDOS for hire, or extortion (as in we'll stop if you pay us). If they cashed out via coinbase, the authorities can find out who profited via the paper trail created.