It is as useful as saying that attackers used Kali Linux - no details of what was actually exploited, just blaming some random tool.

They aren’t blaming a random tool, where do you see blame? For you this information may not be relevant but for many people in the cybersecurity sector it’s very relevant and helps put these frameworks into the spotlight. Sharing knowledge is not a bad thing.