Then this tools was hacked or intentional given to a foreign state.
IP spoofing seems widespread these days. Child’s play for governments.