Why You Shouldn't Pay A Ransomware Attacker