Tag ransomware attack mitigation