The Risk in Making a Ransomware Payment