It's perfectly possible that it is Russia but hack attribution is and has always been a complete and total shitshow. If I were executing any kind of hack attac

It's perfectly possible that it is Russia but hack attribution is and has always been a complete and total shitshow. If I were executing any kind of hack attacks these days I'd consider masquerading as a state actor to be standard opsec. It is way too tempting to blame state actors for a variety of reasons: * Public/shareholders will be more forgiving. * Insurance (as is the case with Sony). * Makes you seem more competent if you "know" who did it straight away. To add to that, once youve picked your culprit you kind of have to double down on it which means embarrassing evidence to the contrary uncovered later will be swept under the carpet for fear of humiliating everybody who said it was [ state ] when it was [ script kiddies in a basement ]. Thus masquerading as a state actor offers a decent amount of protection for a non state attacker coz once attribution is locked in the motivation to track you down evaporates.