Cybercriminals send HR departments ransomware via phony job applications