Researchers analyze a presumably Russian-speaking APT group that has been stealing corporate data since 2018.