The best hacking tools are Russian made and free. Some are even automated - activated it sniffs for holes and returns lists of available exploits. Click a button and site is hacked, data downloaded. Secure sites take 5 minutes, unsecured sites take seconds to hack (like Hillary’s email server). No traces of the hack are left behind unless deliberately so.
Anyone can acquire these tools - The Russian GRU would have no interest, the FSB would not either and both agencies need their money for more productive ventures.
If it is so cheap and easy, why would the Russian security services be pinching pennies?