Too many people are focusing on the malware involved in Google v China. Malware analysis is definitely an important part of attribution, but it’s not the only part. Security Intelligence can’t just look at the problem from a malware, or even a technical, perspective. Think of the havoc that an interloper could introduce by scattering weapons from other armies where a target of psychological operations would find them. The same goes for any vulnerabilities discovered during this event. If you address the malware you won’t solve the problem.”]
Source: https://taosecurity.blogspot.com/2010/01/attribution-is-not-just-malware.html