To make it a crime punishable by up to three years in prison to possess “ransomware” software with malicious intent. The bill defines ransomware as “a computer or data contaminant, encryption, or lock” that can be placed or introduced without authorization into a computer or network, and that restricts access in a manner that enables the perpetrator “to demand payment of money or other consideration” to remove it.