Victims paid more than $24 million to ransomware criminals in 2015