Climbing the Ransomware Maturity Curve