Attackers Turn QEMU Into a Stealth Backdoor for Credential Theft and Ransomware