Researchers have traced the threat activity to a newly identified hacker, while separate evidence points to more than one ...