The FBI has new advice for one of the most persistent cybersecurity threats