RDP remains a key choice for ransomware hackers