Yeah, sophistication to me sounds more like the skill of the hacker. For example, logging in with leaked creds but cleaning up all relevant logs, and doing it d

Yeah, sophistication to me sounds more like the skill of the hacker. For example, logging in with leaked creds but cleaning up all relevant logs, and doing it during normal business hours for that account is a more sophisticated attack than using a zero day remote exploit and leaving a mess of evidence on the target systems.