PRC-linked spies hid inside medical and military networks for more than a year, snooping through Gmail and stealing data