For the sake of discussion, let's say this must be a state actor of some kind. Has there been any evidence provided that this must be Russia?
> The methods utilized in this compromise are consistent with methods utilized in other attributed breaches not disclosed.
I am unable to understand what meaning I should extract from your comment.
My expectation is that an answer to my question must be one of: Yes, No, or Unknown (and possibly accompanied by additional commentary).
Would a proper interpretation of your answer be either of these?:
- "No, there has not been any evidence provided that establishes that this must be Russia."
- "There has not been any evidence provided that establishes that this must be Russia, therefore it is UNKNOWN whether this is Russia."
Not particularly. It is no secret that Americans really don't like the Russian government, and there is precedence for APT groups associated with the Russian government attacking the US. I agree though that there is no publicly available data to support the assertion that Russia is responsible for this at this time. My earlier post was simply pointing out the low likelihood of an individual or independent group performing this attack. The high level of sophistication combined with their risky target selection suggests it is a nation state.