Most countries have cybercrime laws that have clauses for malicious code. Here in Australia for example:
Cybercrime offences are found in Commonwealth legislation within parts 10.7 and 10.8 of the Criminal Code Act 1995 and include:
-Computer intrusions
-Unauthorised modification of data, including destruction of data
-Unauthorised impairment of electronic communications, including denial of service attacks
-The creation and distribution of malicious software (for example, malware, viruses, ransomware)
-Dishonestly obtaining or dealing in personal financial information.
