Attackers exploited trusted applications at a U.S. cloud backup provider to target thousands of customer systems, gaining privileged access within hours.