This stealthy hacker-for-hire group is using phishing, malicious apps and zero-day attacks against its victims | ZDNet