With the initial vector being some widely used Ukranian tax software, and the network vector as psexec/wmic mimikatz harvested credentials, the actual usage of

With the initial vector being some widely used Ukranian tax software, and the network vector as psexec/wmic mimikatz harvested credentials, the actual usage of 'NSA cyberweapons' was just a backup. I suspect this attack would have had a similar number of victims without EtBl/DoPu and EtRo. The existence of 'nation state' offensive tools has little baring on exploitability for poorly configured enterprise network, when most victims were exploited by open source offensive tools, even when patched.