A long time ago, I went to my first (and only) Defcon conference. There was a speaker who had worked in the US government talking about state use of hacking tools.
After the talk I went up to him and asked, "What are the countries that are using these tools?" He looked at me with a certain amount of scorn and said, "All of them."