Low-tech attackers harness open source security tools for targeted cyberespionage