Attackers typically demand payment in cryptocurrencies like Bitcoin, as it's difficult to trace and allows them to maintain their anonymity.