I had an epiphany yesterday about the angle in which this attack is happening and did some digging in my network logs and I may have found something that validates my theory. My background is in scripting so I'm amateur at best in networking, but I feel like it's worth hearing.