>(For the record, I think literally every intelligence agency on Earth is plausible here.)

You can discount Japan. This level of patience, sophistication, and precision attack is far beyond the (non-existent) competency of Japanese developers.