The US Department of Treasury’s Office of Foreign Asset Control (Ofac) has warned that ransom payments to hackers could violate its strict sanctions regulations and