The rogue agent broke into a sandbox, or an isolating testing environment, "hosted on a third-party provider's infrastructure" before turning into a launchpad for the broader hack.