> somehow are stupid enough to leave comments in Acrylic compilation artifacts and strings in malware - very common method of researching attribution and most

> somehow are stupid enough to leave comments in Acrylic compilation artifacts and strings in malware - very common method of researching attribution and most tools pull them as IoCs even if you write tools to strip or null them out all it takes is a single OPSEC failure and you've leaked this info, and we see those all the time should also be noted that the build paths was not the only attribution indicator in that case