New macOS backdoor linked to major ransomware groups