January remains least active month for ransomware activity.