Onion link in the picture, snippet from the article:
Tox is a 2MB executable that is disguised as an .scr file, which the would-be system kidnapper creates as follows: the user registers on the quite user-friendly site (specifically not linked here), inputs their ransomware amount, enters their "cause" (the alert that announces to the victim that their system is being held hostage), and fills out a captcha.