A company spotted a security breach. Then investigators found this new mysterious malware