And what you Russia gain from that?
There's near-constant ddosing on Tor of darknet markets, some if it might've spilled over. Even more likely a random group is doing it because they can. Russia is definitely not the only or main choice even if they are on everyone's minds currently.