It has never been confirmed it's anything but it's been extensively researched and it's pretty obvious what it was.

It's not like this highly-targeted Siemens controller worm was a cryptojacker written by a bored teenager.

> if there was any attack in the first place.

So Stuxnet just randomly self-assembled on the Internet, to attack very specific air-gapped industrial controllers?

In the same way it was never confirmed that Israel has nuclear weapons?

The code has been analysed and it is well known how it worked and what it does. How can it not be called an attack?

Even if this happened, why would someone confirm it and how will it be confirmed? Does US or any other country confirm that they are carrying out espionage program in other parts of world?