US Traces Ransomware Attacks to 2 People Working for Cybersecurity Firms