A threat actor is using Net Monitor for Employees and SimpleHelp to launch ransomware and cryptocurrency attacks.