“Ransomware is more about manipulating vulnerabilities in human psychology than the adversary's technological sophistication”