The attack kit has been built using multiple free tools, "from Python-compiled malware, open-source modules, outdated exploit and freeware hacktools" which hints at these actors possibly being new ...