Agencies urge organizations to strengthen defenses after the group began exploiting SimpleHelp flaws alongside phone extortion tactics.