Winnti APT group uses skip-2.0 malware to control Microsoft SQL Servers