Skip to content

Robert M. Lee

The Problems with Seeking and Avoiding True Attribution to Cyber Attacks

Attribution to cyber attacks means different things to different audiences. In some cases analysts only care about grouping multiple intrusions together to identify an adversary group or their campaign. This helps analysts identify and search for patterns. In this case analysts often use made up names such as “Sandworm” just to group activity together. To…

Continue reading →