Any tool can be obfuscated and mutilated to oblivion...there are brilliant tools around these days that do wonders at the source code level. false attribution

Any tool can be obfuscated and mutilated to oblivion...there are brilliant tools around these days that do wonders at the source code level. false attribution shouldn't work. nobody blindly believes binary signatures like we did in the 20th century. accurate attribution can only be based on the whole picture, with a focus on technique. i.e. types of exploits used, styles of shellcode used, c2 key exchange used, intel types gathered, etc. etc. the arms race is real, information doesn't vanish, nothing is simple.