As I said, "targeted" and "requiring physical access for installation" . . . screams of the three latter agencies, doesn't it? Why would be better to send an agent in to an office, lab, or home to install this malware?
>> There’s a few research facilities, but mostly it’s average people....
That doesn’t mean that certain people weren’t targets. Sometimes a shotgun approach hits more than the target.
Just a possibility.