Re: "Of course the US itself has form"
And do not forget the US companies that make a living selling malware on the Free Market®:
American Malware Purveyor That Did Nothing To Limit Misuse Now Horrified To Find Gov't Of India Misused Its Products
"More digging by Kaspersky and others discovered who was actually behind these deployments. And the source wasn’t some state-supported hackers or a malware purveyor with a malleable set of morals. No, the exploits — which were deployed to indiscriminately target people in Pakistan and China — were sold (in a way) to the government of India by an American firm, Exodus Intelligence."
So would not be strange at all if they were indeed using tools MadeInUSA™.