ESET Research has been analyzing multiple campaigns since last year and some of the campaigns were attributed to the Gelsemium cyberespionage group, and the security company was able to track down the earliest version of their main malware, Gelsevirine, to 2014.