Malware, phishing emails, and even rigged attachments used in an attack contain some obvious and some hidden clues. FireEye published a rundown of seven elements of malware that can provide valuable intel and insight on the attackers behind a hack and their motives. The key is getting beyond concluding the attacker is Chinese, and determining what organization the hacker or hackers belong to and what their strategies are. The biggest advantage to gathering this intel is being able to discern whether an attack is targeted or opportunistic.”]
Source: https://www.darkreading.com/attacks-breaches/csi-cyberattack