Hackers in Russia extorting Americans is illegal under U.S. law; that's extraterritorial jurisdiction. The U.S. government going into Russia (or Pakistan or Ethiopia) to punish those hackers without the home country's permission is extraterritorial enforcement.
We have a lot of precedence with the former. The latter's use is more limited, for obvious reasons.
https://en.wikipedia.org/wiki/Extraterritorial_jurisdiction#...
In fact, I would be surprised if we *didn't* have extraterritorial enforcement of any ransomware laws.