Computer attacks typically evolved over time and developed incrementally. Hackers first pulled off simple attacks that required the least amount of effort and skill to succeed, and security firms and software makers responded with fixes to stop them. The attackers then found alternative paths into systems, until the defenders defeated these as well.
This is more of the sporting type hacking though right? Doing it to prove ability to access, less about specific objectives. So they’re motivated to find path of least resistance rather than most stealthy and most precise control.
