The ransom note is a message displayed to the victim after encryption. It contains instructions on how to pay the ransom, usually in Bitcoin, in exchange for the decryption key. Victims are often directed to use the Tor browser to access payment details and communicate with the attackers.