Major ransomware attacks are proliferating partly because insurers would rather pay the ransom than cover lost revenue.