Hackers are exploiting a flaw in popular file-transfer tools to launch mass hacks, again