I also believe that they actually know more than they are willing to quote in a paper. Likely Kaspersky was used to exfiltrate the data as well, but they aren't

I also believe that they actually know more than they are willing to quote in a paper. Likely Kaspersky was used to exfiltrate the data as well, but they aren't willing to say that. I don't have any evidence of this, but considering the closeness of Kaspersky to the govt, and the built in ability to directly upload files, it seems overkill to try to find a new exploit.