Stopping ransomware in multicloud environments