unsophisticated cyber attacks

Being this is a state sponsored attack, I was really expecting something meaningful like spoofing, identity exploits, or insider threats, but nope. It’s literally just a group of “hackers” typing in the default password of a device and gaining minor remote access.