'Ex-Mossad' group threatened South Africa cyberattack, leaks show