Three presidents, 10 prime ministers and a king were reportedly among the targets.
Small organisations will pay around $500, but large companies could pay hundreds of thousands.
It's the latest global company to be targeted by cybercriminals.
"Patching should be carried out immediately."
Getting iOS 14.4 will fix three different security vulnerabilities.
New Zealand's computer emergency response team has sent out an advisory warning of the attacks.
The Reserve Bank of New Zealand was not the direct target of a cyber attack that breached its data systems, it says.
The charges include conspiracy, computer hacking, wire fraud, aggravated identity theft, and false registration of a domain name.
It's believed to be behind four days of disruption for the stock exchange.