Can the Law Stop Ransomware?