Zero-day vulnerability in Japanese LMS exploited to deploy Cobalt Strike