Attackers gained foothold inside corporate networks multiple times