How Cybercriminals Are Changing Attacker Behaviors: Sophos