Security researchers warn that the initial threat activity was highly targeted, as a limited number of users were impacted prior to disclosure.