Researchers at tech giant Google's Threat Intelligence team highlight a years-old exploit that is now being used by North Korean state-sanctioned hackers.