A Sophos report finds that attackers are adapting their approaches in the face of improved detection capabilities