"Dual use lines of code" --- In practice, most commands are actually common commands that an admin uses for legitimate purposes - to download a file (admin would download the patch; attackers would download the malware), install and activate a file, access or delete data, etc. The goal of the attacker is to get the admin access, to allow herself to control the system. Thus, the attacker actually abuses common commands for malicious purposes.

This 'dual use' nature of code and related commands used during the attacks make it hard to call them 'weapons'. Though - a knife is a dual use technology as well, isn't it?

Source author: Vladimir Radunovic vladar@diplomacy.edu