It seems this is pretty clear case of attributable theft -- it's good that it is being prosecuted. The challenges are with attribution though, in many electron

It seems this is pretty clear case of attributable theft -- it's good that it is being prosecuted. The challenges are with attribution though, in many electronic-only attacks, it "could be" anyone. Companies like CrowdStrike have done some work to attribute PLA & China in some attacks: http://blog.crowdstrike.com/hat-tribution-pla-unit-61486/ http://blog.crowdstrike.com/hat-tribution-pla-unit-61486/ http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intellige... But largely APT attacks are happening without repercussion, probably by many countries, including the US, and as a "defender" against many of these, it is terrible. The worst part is, I don't see it changing: Nothing right now is driving State-Actors to stop doing whatever they want against corporations.