Sophos went so far as to plant surveillance implants" on its own devices to catch the hackers at work-and in doing so, revealed a glimpse into China's R&D pipeline of intrusion techniques.