A Chinese hacking group that has been using tools linked with the National Security Agency might have obtained at least one without breaching NSA systems.
Symantec has evidence that Chinese-linked hackers were using NSA-authored tools at least a year before they were publicly leaked by the Shadow Brokers.