is there actually any source those attacks are really done by "script kiddies"?

More likely this more politically motivated and backed up by money and more capable groups

i don't think script kiddies are a thing anymore.

AI kiddies, more likely. in some ways script kiddies weren't a thing for a decade or more as the attack surface got considerably harder to penetrate, and the model changed for pay-to-play attacks. AI simply caused the bottom of that market to fall further, and effectiveness to increase.

Yes, thats what I meant