Should You Pay Up If You Get Hit by Ransomware?