Hackers target US firms in FastJson RCE zero-day attacks