It's not just them denying it, but McAffee as well: http://siblog.mcafee.com/cto/operation-“aurora”-hit-google-o...

Considering the original report was unsourced, I'm inclined to believe them