Google's Threat Analysis Group is calling the hackers Exotic Lily, and it says they employed relatively novel tactics.