Civil action may hit cyber thugs harder than criminal laws