Command-and-control wares try to sneak onto systems disguised as various vendors; payloads vary, but Sophos customers are protected