It does seem a lot like ransomware.