This group of cybercriminals is named Malteiroby SCILabs, they operate and distribute the URSA/Mispadu banking trojan.
No exploited CVEs have been attributed to this threat actor yet.