Hackers don't want Bitcoin, some now like Monero

... which hides virtually all transaction details, and is considered a privacy token. With Monero, it's more difficult to see who the sender and recipient are, and transaction amount. 90-95% of ransoms are still paid in Bitcoin, but Monero is increasingly popular.

Bitcoin is public ledger and stores all transaction history. It was headline news this month how the FBI recovered payments made with Bitcoin to the Colonial Pipeline hackers.

Difficulties with using Monero include that many regulated exchanges have chosen not to list it to to regulatory concerns, meaning it's less liquid and can't be cashed out as easily as Bitcoin.