FIN8 group used Sardonic backdoor in a recent attack