Threat actors are using BlackByte ransomware to abuse legitimate servers and bypass security layers.