Workforce monitoring software was abused in two cases of attempted ransomware attacks, researchers from Huntress found.