How do they ever know it is a state actor? It always seemed to me that a sophisticated attack should be fairly untraceable? but then it always seems that they always know where it is from (or at least, "state actor"), is that mainly based on who has motive or are there more certain clues and traces that are always left, like the muddy footprints leading to the border?