A law condemning ransomware users has been proposed in a US state legislature. The bill will allow both civil and criminal penalties to be brought against those involved in ransomware attacks. Offenders could be given up to 10 years in prison, a US$10,000 (£8000) fine and be liable for civil damages.