Ransomware, but they install an unlicensed copy of Oracle somewhere in your organization and threaten to tell Oracle about it if you don’t pay up.
@duanegran They could set up an EC2 instance and run it for a few weeks, if you dont pay up.