Ransom payments fell 8% in 2025 while victim counts rose 50%. Here is how a modern attack actually progresses, and which defences the incident data says work.