Threat Groups SandCat, FruityArmor Exploiting Microsoft Win32k Flaw