Docs: tweak "sock" malware interface description