The newly uncovered group uses a mix of custom and publicly available malware tools to breach targets in order to steal data.