Even with slick tools, sometimes the crackers do get it wrong. Few days ago I was reading on Check Point a technical analysis of cyber attack on Iranian state t

Even with slick tools, sometimes the crackers do get it wrong. Few days ago I was reading on Check Point a technical analysis of cyber attack on Iranian state television. And the security analysts who were analysing the data were all dealing with debug-mode files left behind after the attack! There was no attempt by the crackers to clean-up the binaries before releasing it on the target. BTW, there could be a motive behind this as well, to let the victim know deliberately who they were and how they were doing it. But this is very rare, and only useful if it is a one-off attack. But the attack that was analysed by Check Point was that from repeat offenders, so to me it looked like someone who had just taken an online cracking 101 lessons and targeted few state institutions of a country :)