Ransomware Attackers Bypass Security Detection Using VMs