I don’t think the US is outmatched in capabilities compared to Russia. The difference here is the tacit permission for private criminal groups to operate in Rus

I don’t think the US is outmatched in capabilities compared to Russia. The difference here is the tacit permission for private criminal groups to operate in Russia as long as they don’t attack Russian interests. If the US criminal justice system effectively decriminalized cyber attacks on foreign entities by the private sector, a lot more people on this forum would be rich and the scourge unleashed would make the Internet a far more interesting and hardened landscape. In other words, it’s less a product a higher class of technical capability maintained by the nation so much as the work product of a deregulated and privatized industry operating in a blue ocean.