China-linked group introduces new custom tools in recent attacks.