Also, mention the potential risks if users pay the ransom—no guarantee of decryption, and funding criminal activity.