It you look at the indicators of compromise that law enforcement shared on Fancy Bear and Grizzly Steppe you would notice that a large portion of the IP address

It you look at the indicators of compromise that law enforcement shared on Fancy Bear and Grizzly Steppe you would notice that a large portion of the IP address are tied to VPN providers like Hide My Ass. Attribution is very very very hard. https://krebsonsecurity.com/2017/08/blowing-the-whistle-on-bad-attribution/ https://krebsonsecurity.com/2017/08/blowing-the-whistle-on-b...