this presents no proof, but I’ve read lots of krebs security proof on other exploits and I think it is all very weak
nothing is stopping anybody here from putting breadcrumbs in a payload to point the finger at North Korea or a former Soviet state
This is kind of a silly standard that allows hackers to operate with impunity and companies to avoid accountability and the fbi from not bothering
I agree with you that seeing evidence would be nice, but I understand that there is the possibility that evidence supporting the claim exists and at the same time cannot be released to the public.
What other threat actor's internals (and I mean more then chat logs) have been made public?
I already conceded in my original response that if you hacked another group first, then yes, you can leave fake breadcrumbs.
And I'm also saying you don't necessarily need to hack another group to find their tools.