NotPetya an ‘act of war,’ cyber insurance firm taken to task for refusing to pay out