The ransom demanded should never exceed the value of the target. Attackers can also focus on other targets, that are perhaps more valuable, reducing the number of infections, but greatly increasing the ransom demanded.
What if a whole building is held hostage, locking down all doors and preventing access to anyone? What if we start seeing ransomware focused on industrial control systems (ICS) that could potentially poison an entire city? We could start seeing ransom demands in the millions rather than in the hundreds of dollars.
