Surveillance malware targets Libyan government entities, with possible links to a 2019 Egypt attack campaign.