Malware that encrypts systems and demands payment, the Colonial Pipeline attack being the industry's case study.