A new report by Cisco's Talos Group suggests that the CCleaner hack was more sophisticated than initially thought as it dropped a second payload on some PCs.