State-sponsored actors are deploying the unique malware–which targets specific files and leaves no ransomware note–in ongoing attacks.