Alliance of 40 countries to vow not to pay ransom to cybercriminals, US says