Over 100 unique threat actors purchased these tools, leading to widespread distribution through phishing, third-party app stores, and social engineering.