Maybe it's part of a "list of things to do first" when a target has been breached by gaining access. There are mass email-based phishing attacks, there are spea

Maybe it's part of a "list of things to do first" when a target has been breached by gaining access. There are mass email-based phishing attacks, there are spear-phishing attackes, and there are likely procedures to follow when a specific group's target has given up physical access via root. As for RH-only, what makes us think that there aren't also Debian and other similar attacks? MS-Word is also "somewhat unimpressive," as it's only usable on Windows.