Why do we always blame Russia? Sure, they're a likely suspect, but I would imagine any team working for a government will also be capable to make it appear as if the attack is coming from anywhere else.

Lots of attacks from China and even North Korea, which would have a lot to gain in the information and tools they'd be able to steal. Reading about Bureau 121 is always fun.

I guess I just don't understand how you could be 100% certain in this day and age but I'm sure they have methods of analyzing traffic that is way over my head to determine the true origin.