Was not Russia.
its ALWAYS china
I don't think attribution is possible. There is no way to know who the fuck is behind these attacks. It is well known that the NSA and CIA have tools to mimic the known TTPs (Tools Tactics Procedures) and insert any foreign languages and syntax into their code. Mimicing state sponsored or well known hacker groups AND most of those tools were released to the public by the Shadow Brokers and Vault7 this means any skilled "hacker" can now mimic any state sponsored or well known cybercrime group.
(post is archived)