The ransomware group breached SmarterTools through a vulnerability in the company's own SmarterMail product.