The individuals allegedly used spearphishing and malware to target the accounts of “dozens” of current and former U.S. officials. 

People associated with the operation shared with a journalist a document dated Sept. 15, according to new reporting.