They made it appear that the exploit somehow was able to determine that a user-level account with the name of adam existed. SSH shouldn't do this.

Then they made it appear that they were able to log in as adam, and the logs don't make it look like a brute force.

Then they made it appear that somehow privileges were elevated from adam to root, but did not provide any supposed log of how this was done.