They're not really "blaming" the tool though. They're using a supply chain attack against the subset of users they're interested in.