It is crucial not to pay the cybercriminals, as it can double the cost of dealing with an attack.