The read up is very interesting but I don't understand the Sonic Wall VPN exploit and how they planted the keylogger in the first place.

Was it an inside job?