The researchers could not pinpoint the exact vulnerability used to deliver this malware, but they are speculating that the threat actors automated the process and likely leveraged whatever known, unpatched flaws they could find.