Hackers could be gathering intelligence for future attacks, Sophos researchers said. Authorities warn users to apply patches and check for compromise.