China-backed Storm-2603 deployed ransomware via SharePoint zero-days