Cyber-thieves made at least $25m from ransomware in the last two years suggests research by Google