While Black Matter, a new ransomware group, promised not to target critical infrastructure, those purchasing the RaaS don’t necessarily follow that rule