The snoops maintain persistence via custom malware including GhostSpider, SnappyBee, and the Masol remote access trojan, he added. This echoes an earlier report by Trend Micro that said malware ...