Ugh, not these guys. Hopefully the WSJ article had a better source. ThreatConnect will take any random connection and a big brand name / country and crap out a report.