Colonial Pipeline’s apparent decision to pay a $US 5 million ransom can only validate ransomware attacks in the eyes of hackers.