[rgrmrts]

I’d assume they’re not actually paying for these attacks and have access to a large botnet, which would imply no cost (outside of hours spent constructing the attack) to the adversary, right?

[jacobobryant]

They might be renting the botnet.