This article claims that the hoax calls must be someone operating out of Ethiopia, based on IP address geolocation. This is wrong; the attacker is almost certai

This article claims that the hoax calls must be someone operating out of Ethiopia, based on IP address geolocation. This is wrong; the attacker is almost certainly somewhere else, proxying their traffic through a random compromised computer. Attributing cybersecurity incidents this way basically never works; if someone is doing major cybersecurity mischief, this implies they have both the skills and the motivation to set up a proxy like this.