'Mercenary' hacker group runs rampant in Middle East, cybersecurity research shows