Ultimately, what made this attack possible and effective is the low morals of the people who applied to other jobs behind their employer's back, on their employer's computers
Employees don't belong to their employer. There is nothing wrong with trying to acquire a potentially better job. The only real problem is they were using company resources to do so. Also, they were completely incompetent by running random executables.