Persistent Threats Can Last Inside SMB Networks for Years