After several years of using simple implants, the Russia-affiliated threat actor is back with two new sophisticated malware tools.