From the Reuters article about solo hackers who were tracked through exposed Cairn panels, and were observed using multiple agent stacks to attack sites around the world. It's no longer a safe assumption that any large scale attack like OpenCode is being done by a team.