How the most damaging ransomware evades IT security