A group of hackers returns, switching between China, the US and Europe, now targeting corporate servers to steal crypto and kill mining software with modified malware