For a start, yes. Also Israel, of course, and anywhere else countries host these kinds of malware companies. A trade ban would inevitably be best implemented via a treaty, but there's no reason unilateral action can't happen first.

I can't tell what your point is, exactly. You're just making a cynical point that this won't work so we shouldn't even try?