tokens: Our analysis shows that the threat actor behind the FakeSpy malware is a Chinese-speaking group , commonly referred to as " Roaming Mantis '' , a group that is known to have launched similar campaigns in the past .