People doing threat intelligence are generally on top of attribution and try to do appropriate, fact-based attribution. That said, the warnings about Russia in

People doing threat intelligence are generally on top of attribution and try to do appropriate, fact-based attribution. That said, the warnings about Russia interfering with US infrastructure were flowing a bit before the invasion of Ukraine. Russia would be the first suspect on the top of the list, even barring good threat intel.