this is a well researched article. Shame these are rare vs the norm.
Reading thru the narrative about Appin, there's not a lot of complicated technical stuff. Their "training" consisted of novel approaches to social engineering / phishing that are a step up from your standard pretend-errant SMS of "hey I'm in town want to meet, (wrong person)?" to trick you into eventually clicking a URL.
Not a lot of science at all. Just clever & resourceful people, operating at scale.
