Hackers often exchange information, tools and hacked data on hacker forums. The ability to attribute an attack to a particular group becomes even more important when it comes to major security breaches. Security experts say that attribution is very hard because hackers tend to share, buy, copy or steal other hackers’ tools. For example, code with a string of Russian text could just as likely be used by Peruvian hackers or North Korean students. The problem for security experts is that in many cases it comes down to “sloppy handle usage” on forums.”]
Source: https://www.csoonline.com/article/3150131/know-your-cyber-enemy.html