Attackers spread malware through ScreenConnect file transfers