Facebook’s investigators traced the Android developers to Beijing Best United Technology and Dalian 9Rush Technology.

Sometimes attribution takes years. Not this time.

“We anticipate more platform-specific malware to appear," Facebook researchers said.

On Facebook, the suspicious activity involved reaching out to policymakers, reporters, academics, and dissidents.

Researchers tell CyberScoop that there is not enough information to pin this campaign on the Kremlin.

The social media titan hired Nathaniel Gleicher, a former cybersecurity director in the White House during the Obama administration, to the position last month.