For this to work, your adversary would have to be the worst hacker possible, but maybe. Other possibilities: 1) A script file containing a list of commands wa

For this to work, your adversary would have to be the worst hacker possible, but maybe. Other possibilities: 1) A script file containing a list of commands was recovered during forensics, which did something obvious like search for something and delete. This is common for automated attacks, and seems unlikely for a targeted attack. 2) "Commands" is being interpreted too literally. They could have observed that files were deleted, and consider the act of deletion to be a "command". You can't really take technical reporting from mainstream media to be that accurate.