Security researchers from Palo Alto Networks believe the likely Asia-based group is expanding its activities, which include sophisticated tools and techniques.