More than 1,000 organisations have been infected by malware known as ‘Energetic Bear’, said to be operated by a state-backed group with ties to Russia