Aurora ransomware turns AI coding agent into intrusion assistant