Cybereason firm says MalKamak group used Dropbox to issue commands to its Trojan; findings show similarities to previous known Iran-backed hacks