The hack at Florida water treatment facilities used latent remote access software