Ransomware is working, and the cybercrooks know it