Hacking campaign uses old Microsoft Office flaws to create backdoors, steal files