I also mostly seen it as EDR/AV killer. A bit overkill as initial access, but thats part of the joke of the article