Cybercriminals are using virtual hard drives to drop RATs in phishing attacks