This attack is a supply chain attack on enterprise software used by huge government organizations. Where can teenagers with wget pull that off? When a leading

This attack is a supply chain attack on enterprise software used by huge government organizations. Where can teenagers with wget pull that off? When a leading security group (FireEye) says it's a state-level actor, I don't think they are doing PR. It's fine to be skeptical, but why are you being skeptical? Perhaps it's lost on me but I don't think the claim that PR would look bad _if it were teenagers_ is a good reason to promote widespread distrust of ???. I see the compromise of SolarWinds Orion software as far more likely to be carried out by state level actors than by script-kiddies. What would script-kiddies stand to gain?