Group-IB said Gigabud doesn’t execute malicious actions immediately but waits for user authorization