IT firms, telcos among dozens hacked in new info-stealing malware attack