CrowdStrike said the attacker used ARTEX, a recently released Chinese-developed open-source penetration testing tool.