There is always a trace. You need better cybersecurity, to prevent them from penetrating the network to start with, and to root them out after the fact. Consult with firms like Cloudstrike, FireEye and other specialists who cope with nation-state malicious actors likw China and Iran and who can deal with this, as well, albeit for a price.