Attackers can remotely access the infrastructure to install, remove or encrypt any application that the affected companies are running in the cloud.