A China-linked threat group’s custom malware arsenal is quietly breaching government networks across continents.