A familiar playbook with a twist: 3AM ransomware actors dropped virtual machine with vishing and Quick Assist