A state-sponsored cyber-espionage campaign has been targeting companies globally including those in the U.S., a new report says.