I always wonder in these “news” articles how they narrowed it down to a specific nation. Did they locate the person or team? Why military network is still expos

I always wonder in these “news” articles how they narrowed it down to a specific nation. Did they locate the person or team? Why military network is still exposed on internet anyway?