ransomware negotiation