Sophos researchers reveal that legitimate tooling and repeated Windows hostnames are common among the biggest cyber attackers ...