I didn't read that the same way as you, though it's hard to tell what they're saying. My first thought was that means they traced Finfisher installations to 25

I didn't read that the same way as you, though it's hard to tell what they're saying. My first thought was that means they traced Finfisher installations to 25 countries. Those might be command and control centers for 25 distinct countries, or one. And they might or might not be the countries where the server's were located.