A large security company or a nation state can absolutely attribute malware originating from nation-states (APTs) with a high degree of confidence. We are not

A large security company or a nation state can absolutely attribute malware originating from nation-states (APTs) with a high degree of confidence. We are not talking about some recombinant script kiddie malware: Slingshot is attributable, Stuxnet was attributable, the DNC penetration was attributable. Nation-states with mature cyberwarfare capabilities, and their appendages such as Kaspersky, are routinely capable of identifying the authors of novel malware.