Biggest ransomware syndicates and how they work