An indictment says Zohar Pinhasi's MonsterCloud billed ransomware victims millions for a decryptor it did not have, then paid the attackers a fraction of that fee.