Windows services lay the groundwork for a Midas ransomware attack

Attackers took two months to craft and install PowerShell scripts as services before deploying the ransomware