The State of the Ransomware Threat - To Pay or Not to Pay?