Did you check the md5? If they were different, it could be anything (it doesn’t imply modifications from massgrave either)
As for logic, bad actors would do anything. Even hijacking a server and replacing the ISOs of other hackers, or infiltrate the group and do so.
I downloaded huge sets from internet archive.