Two respected security experts used their insider skills to unleash ransomware havoc, landing four-year prison terms.