Most ransomware attacks take place outside the working hours