Malware payouts from insurance companies pose a threat to U.S. national security.