A ransomware group has been using legitimate employee monitoring and remote support software to infiltrate corporate systems, according to new research.