Company’s ransomware decryption service is a sham, researchers report