The Chinese state-backed espionage group started targeting third-party IT services in late 2024, Microsoft researchers said.