I'm not sure whether or not you misread GP, but just to clarify in case, GP means that the malware used code that was leaked from the NSA, not that the NSA was

I'm not sure whether or not you misread GP, but just to clarify in case, GP means that the malware used code that was leaked from the NSA, not that the NSA was directly involved in making the botnet. This popped up in google: https://threatpost.com/pyromine-uses-nsa-exploit-for-monero-mining-and-backdoors/131472/ https://threatpost.com/pyromine-uses-nsa-exploit-for-monero-...