Chinese hackers perform 'rarely seen' Windows mechanism abuse in three-year campaign