Getting serious about ransomware attacks could mean cutting off the supply, one expert says.