A study finds that ransomware now generates 'tens of millions' of dollars in revenue for criminals.