What's the end result? Prosecuting the victim of a cybercrime for paying a ransom?