How a tiny LA cybersecurity firm pulled the plug on a global ransomware attack