Citrix’s remote access tool, GoToMyPC, says it has suffered a “very sophisticated password attack.”