Ransomware group arrest