Cybercrime said to cost US $140 billion, radically less than previous estimates