Red October

With Rocra (another name for Red October), however, Kaspersky suggested that the exploits were the work of Chinese hackers, while the Rocra malware modules - which scan networks and collect data - appear to have been created by Russian-speaking operatives.

"The main purpose of the operation appears to be the gathering of classified information and geopolitical intelligence, although it seems that the information gathering scope is quite wide," Kaspersky said. "During the past five years, the attackers collected information from hundreds of high profile victims although it's unknown how the information was used. It is possible that the information was sold on the black market, or used directly."

So was this a dual operation with the Chinese AND Russians? But not state sponsored?