[wlug] Fake EFF site serving espionage malware was likely active for 3+ weeks