‘Project Sauron’ malware hidden for five years