ransom payment bans: a solution to cybercrime or a dangerous oversimplification?