Overnight logs show repeated default-password attempts against the public library Wi-Fi admin page using widely published tools. Which actor attribute set is most accurate?

Unskilled attackers (sometimes called script kiddies) rely on publicly available tools, known default credentials, and limited tradecraft. Spray attempts against a library Wi-Fi admin interface with commodity tooling match that profile. The scenario does not describe custom espionage malware, ransomware encryption for profit, or authorized testing under engagement rules.