Here's the paper[1] from the University of Toronto showing that the attack originated from the Great Firewall. Given the firewall is operated by the Ministry of Public Security that points the finger pretty clearly at the government. The way the attack was orchestrated implies however that Baidu was an unwitting victim.