Research from BlackBerry aims to help K-12 schools and universities identify a trojan horse virus that's being used by operators of the PYSA ransomware.