After compromising websites, the Russian state-sponsored threat group is fingerprinting victims, then harvesting information from the interesting ones.