Despite legal implication, some companies pay the ransom demanded by WannaCry