Who needs advanced malware when you can take advantage of a bunch of OSS tools and free cloud services to compromise your target?

​Who needs advanced malware when you can take advantage of a bunch of OSS tools and free cloud services to compromise your target?