An APT group exploited ESET flaw to execute malware