According to Symantec, Chinese spy group had been using NSA malware for over a year before the Shadow Brokers leaked the same exploits online, exposing them to the whole world.  The group became well known after US authorities charged three hackers in late 2017.  The US alleged that a cyber-security company, Boyusec, was acting as a front for the Chinese Ministry of State Security and had hacked western companies such as Moody's Analytics, Siemens, and Trimble.