The group has been using Mythos regularly, but not for cybersecurity purposes, according to the report.