[filmgirlcw]

And my point is that with this attack, that wouldn’t matter. The exploit was state-sponsored and specifically targeted and was going after even up to date (at the time) devices. Citizen Lab was only able to glean as much information as it was in one case because the journalist reached out 7 months before he was hacked and they gave him a VPN they could use to monitor his traffic logs. The journalist was a key part of figuring this out, which goes against your entire point that the IT department would have caught this.

They wouldn’t have and they didn’t. This isn’t a scenario where you can blame lack of information or talk about who is or is not inherently technical. It was state-sponsored targeted hacking.