If you assist a ransomware victim in paying out to cyber attackers, you could end up facing civil penalties, OFAC says.