Cyber attacks are always spiked with false attributes to cover the tracks: VPN origin, comments in a foreign language, timestamps from a timezone far away. If an attack looks like Chinese, it is anything but that.