The attacks started a lot earlier than previously thought, and bear the hallmarks of multiple threat actors.