A single click on a fake activation executable can encrypt all your files, holding your data hostage for thousands of dollars.