You should not pay ransomware. Rather, you should remove the ransomware using antivirus or encryption software. Paying the ransom may not get the hacker to remove the ransomware. In addition, organizations that paid the ransom paid $1,448,458 on average, compared with $732,520 of those that don’t pay, according to research from cybersecurity company Sophos.