The group was posing as a researcher from Cambridge, and was found to have added three new malware families to its spy arsenal.
Source: Threadpost