Kaspersky said the campaign exploiting USB drives first came to light in early 2023