US cybersecurity chief warns of 'market' in malware