Singapore companies pay average S$1.5m after ransomware attack: report