Zeppelin ransomware operator has $2.8 million