ransomware agreement