We had this discussion in another thread. This was a most likely state sponsored action with huge time investment. It was also highly complicated because it is nearly impossible to hide this stuff due to the number of eyes on the code. Of course it is possible, but its not feasible to assume its somehow massive.