The book "Never split the difference" is a great read on hostage negotiations.

I do (half) remember reading that book! I actually meant to ask (in my question above) whether that book is actually "accurate"/representative of malware negotiations.