Storm-0501 attacking hybrid environments with ransomware