If you pay a hacker’s ransom, chances are that they’ll come back for more