Businesses need to stop thinking that ransomware is different from other attacks