Law enforcement agencies in the US and UK advise against paying ransomware demands, as this provides further encouragement to cybercriminal gangs. Businesses that do are more likely to come under further attack than those that refuse.