What Attackers Know and What They Have to Lose: Framing Effects on Cyber-attacker Decision Making