China-based APTs waged 5-year campaign on Sophos firewalls