Perhaps the parent commenter was referring to the section in the report which stating the IOCs indicated that the attackers used the known third-party command a

Perhaps the parent commenter was referring to the section in the report which stating the IOCs indicated that the attackers used the known third-party command and control system named Sliver. There are multiple public yara signatures for Sliver.