Tag ransomware-as-a-service model