IT threat evolution Q1 2018 (DPRK-related paragraph 1)

Kaspersky Securelist

One of the most notable aspects of this incident was the ‘attribution hell’ that followed. In the days after the attack, research teams and media companies around the world variously attributed the attack to Russia, China and North Korea – based on a number of features previously attributed to cyber-espionage and sabotage groups allegedly based in these countries or working for the governments of these countries.