Ransomware negotiation