A long-running Russian state-backed hacking group appears to be behind an ongoing campaign designed to install a widely used surveillance tool on Ukrainian computers, researchers have found.