WikiLeaks has published the third batch of documents dubbed Marble that revealed the CIA anti-forensics tool dubbed Marble framework. The code used by the CIA was able to evade detection implementing various techniques, for example, it is able to detect if the code runs in a virtual machine sandbox. The Marble Framework platform makes hard the attribution of the attacks, the documents show how CIA can conduct a cyber attack in a way experts attributed it to other countries, including Russia, China, North Korea and Iran.”]
Source: https://securityaffairs.co/wordpress/57586/intelligence/vault7-marble-framework.html