Chainalysis acknowledged that the "true totals" of ransomware attacks could be much higher but victims are becoming less reluctant to pay up.