A newly identified group launched attacks against key organizations in Georgia and Moldova using a custom backdoor program that hijacks a Microsoft .NET optimization tool for persistence.