Update readme with the attacker vm