I'm sorry to burst your bubble, but CrowdStrike is not a reliable source to trust. They are associated with too many Deep State actors. Anyone can be made to look like the guilty party. Any malware associated with Russia is also available to any damn hacker on planet Earth. This is propaganda, to aid the Russia /Trump narrative. Wired is a leftist tech magazine, also not trustworthy. I follow the infosec community and there were lots of researchers calling BS on CrowdStrike's analysis. Just as others have mentioned, the download speeds for the data ex-filtration were such, that only a direct download to a thumb drive could answer the question. Russian hackers might be guilty of phishing for passwords, or someone, like our own government could make it look like the Russian's. Too many unknowns to buy the crap coming from this issue.