Security professionals have long attempted to identify threat actors through linguistic analysis. But this method is limited when it comes to attribution. Linguistic analysis will very rarely lead to the smoking gun, an analyst says. The challenge with linguistic analysis is that isnt enough to be conclusive on its own it needs to be combined with other evidence to point the way toward attribution. In the case of WannaCry, the ransom notes were written in 27 languages, one analyst concluded that a Chinese-speaking author was behind the original ransom messages.”]
Source: https://securityintelligence.com/the-limits-of-linguistic-analysis-for-security-attribution/