Cybercriminals have been using a remote access trojan to target small office/home office (SOHO) devices for nearly two years, Lumen Technologies reports.