Unlike the physics of the supply of paper money, these kinds of ransom demands benefit from simultaneity.

And the attackers want to funnel it upward as quickly as possible before escaping.

I would assume international organization unless strongly proven otherwise.