with how the tool works or minimally trained in Mandarin. A large portion of these tools were freely available on underground Chinese hacking sites. Chinese hacking collectives or corporations may have been independently involved. However, due to the suspicions voiced in the leaked diplomatic cables suggesting PLA involvement28 and Mandiant