Sophos has released findings on how attackers breached and spent five months inside a regional government server in the U.S.,…