Again, the article mentions that the initial group struggled to get any sort of foothold after the initial intrusion...it wasn't until the "advanced" team took

Again, the article mentions that the initial group struggled to get any sort of foothold after the initial intrusion...it wasn't until the "advanced" team took over that the real breach began: bypassing firewalls, installing back doors and web shells, etc.