The government is considering proposals to change how the public and private sector treat cybercriminals’ ransom demands.