{"id":43457,"date":"2021-10-18T14:00:00","date_gmt":"2021-10-18T14:00:00","guid":{"rendered":"https:\/\/www.darkreading.com\/analytics\/in-cyberwar-attribution-can-be-impossible---and-that-s-okay"},"modified":"2021-10-18T14:00:00","modified_gmt":"2021-10-18T14:00:00","slug":"in-cyberwar-attribution-can-be-impossible-and-thats-ok","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/","title":{"rendered":"In Cyberwar, Attribution Can Be Impossible \u2014 and That&#8217;s OK"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt91ec549f660a94a9\/61674fff9d16c01cbc84a915\/Cyberwar.jpg\" class=\"ff-og-image-inserted\"><\/div>\n<p>For most of human history, battle lines have been clearly demarcated. Physical borders, trenches, and satellite imagery have shown us launch sites, front lines, and enemy targets. Technology has allowed opponents to trace every inch of a weapon&#8217;s path. Historically, we have been able to determine the source of a strike and know who we&#8217;re up against with clarity.<\/p>\n<p>But the rules of cyberspace are different. <\/p>\n<p>Acts of cyberwar continue to proliferate \u2014 defined by espionage, proxy battles, disinformation campaigns, and guerrilla tactics. Every day, it becomes more challenging to establish the source of an attack \u2014 and therefore, to establish an effective, proportional response.<\/p>\n<p>An enemy you can neither see nor identify looms large. But it&#8217;s time to acknowledge a hard truth: In today&#8217;s world, attack attribution in cyberspace can be impossible for all but the best-resourced governments and organizations. A <a href=\"https:\/\/www.securitymagazine.com\/articles\/94995-academic-study-highlights-100-rise-in-nation-state-attacks-over-three-years\" target=\"_blank\" rel=\"noopener\">recent analysis<\/a> of more than 200 cybersecurity incidents associated with nation-state activity since 2009 found that half of them involved &#8220;low budget, straightforward tools that could be easily purchased on the darknet.&#8221; <\/p>\n<p>The reality is apparent: We may never know who is behind incidents that create chaos and cause damage in most cases.<\/p>\n<p>And that&#8217;s OK.<\/p>\n<p><strong>Why &#8220;Who Did It&#8221; Matters Less Than &#8220;How to Prevent It&#8221;<\/strong><br \/>Leading governments, enterprises, and other organizations on the cutting edge of cyber defense realize they cannot stop determined attackers from getting into systems. There are too many attack vectors, and digital infrastructure across industries is only becoming more complex. Between 2019 and 2020, ransomware <a href=\"https:\/\/www.pbs.org\/newshour\/nation\/why-ransomware-attacks-are-on-the-rise-and-what-can-be-done-to-stop-them#:~:text=Between%202019%20and%202020%2C%20ransomware,its%20annual%20Internet%20Crime%20Report.\" target=\"_blank\" rel=\"noopener\">attacks alone were up<\/a> by 62% worldwide and 158% in just North America. <\/p>\n<p>Instead, the entities best positioned to protect themselves are changing their strategy. Sophisticated organizations that are the victims of cyberwar are increasingly focusing on minimizing risk and disruption once attackers inevitably get inside \u2014 not on identifying attackers. <\/p>\n<p>By assuming that a breach is inevitable, companies can concentrate on identifying anomalies in their digital infrastructures. Identifying potential threats will help prevent a breach from spreading laterally within their network and transitioning from a manageable attack into a full-blown disaster. <\/p>\n<p>Consider the attack on SolarWinds, which came to light in December 2020. It affected up to <a href=\"https:\/\/www.reuters.com\/article\/us-cyber-solarwinds-microsoft\/solarwinds-hack-was-largest-and-most-sophisticated-attack-ever-microsoft-president-idUSKBN2AF03R\" target=\"_blank\" rel=\"noopener\">18,000 customers<\/a> and cost SolarWinds <a href=\"https:\/\/www.nasdaq.com\/es\/node\/10954061\" target=\"_blank\" rel=\"noopener\">$18 million<\/a> to sort and <a href=\"https:\/\/www.natlawreview.com\/article\/solarwinds-insured-losses-estimated-90-million\" target=\"_blank\" rel=\"noopener\">$90 million<\/a> for cyber insurers. Overall damages were estimated to be as high as <a href=\"https:\/\/www.rollcall.com\/2021\/01\/11\/cleaning-up-solarwinds-hack-may-cost-as-much-as-100-billion\/\" target=\"_blank\" rel=\"noopener\">$100 billion<\/a>. <\/p>\n<p>Similarly, the attack on Microsoft Exchange affected up to <a href=\"https:\/\/www.hivepro.com\/60000-organizations-susceptible-to-microsoft-exchange-server-zero-day-vulnerability\/\" target=\"_blank\" rel=\"noopener\">60,000 organizations<\/a> and <a href=\"https:\/\/unit42.paloaltonetworks.com\/remediation-steps-for-the-microsoft-exchange-server-vulnerabilities\/\" target=\"_blank\" rel=\"noopener\">125,000 unpatched servers<\/a><br \/>\nworldwide. The most alarming statistic? Attackers <a href=\"https:\/\/blog.checkpoint.com\/2021\/03\/11\/exploits-on-organizations-worldwide\/\" target=\"_blank\" rel=\"noopener\">aimed 23%<\/a> of all Microsoft exploit attempts at US government and military targets.<\/p>\n<p>But how do you respond proportionately to the SolarWinds attack when <a href=\"https:\/\/www.reuters.com\/technology\/russian-spy-chief-denies-svr-was-behind-solarwinds-cyber-attack-bbc-2021-05-18\/\" target=\"_blank\" rel=\"noopener\">Russia denies any involvement<\/a>? How do you punish China for the Microsoft Exchange attack when they <a href=\"https:\/\/apnews.com\/article\/microsoft-exchange-hack-biden-china-d533f5361cbc3374fdea58d3fb059f35\" target=\"_blank\" rel=\"noopener\">claim<\/a> the accusation is nothing more than a &#8220;<a href=\"https:\/\/apnews.com\/article\/microsoft-exchange-hack-biden-china-d533f5361cbc3374fdea58d3fb059f35\" target=\"_blank\" rel=\"noopener\">malicious smear<\/a>&#8220;? <\/p>\n<p><strong>Why Self-Learning AI Matters More Than Ever<\/strong><br \/>Instead of using a substantial proportion of resources to answer these questions of attribution, organizations should reprioritize these resources to focus on defenses that will help them remediate an attack. We absolutely should not ignore the geopolitical dynamics of cyberwar. But we should shift energy to concentrate resources on defensive capabilities to make operations significantly safer no matter the threat actor. <\/p>\n<p>Self-learning artificial intelligence (AI) is the most effective weapon we can employ in this fight. Self-learning AI can continuously analyze an organization&#8217;s behaviors in real ime to learn what&#8217;s normal for that organization. Detecting and disrupting abnormalities in their early stages will prevent malicious activity from escalating and give human security teams valuable airtime to respond and remediate the root cause of any incidents.<\/p>\n<p>As attackers grow more advanced, so must our preparations to defend ourselves. We should not abandon efforts to determine attribution; President&nbsp;Biden&#8217;s recent ransomware <a href=\"https:\/\/home.treasury.gov\/news\/press-releases\/jy0364\" target=\"_blank\" rel=\"noopener\">sanctions<\/a> on virtual cryptocurrency exchange platforms and &#8220;<a href=\"https:\/\/www.politico.com\/news\/2021\/07\/06\/biden-faces-moment-of-reckoning-over-sprawling-russian-cyberassault-498327\" target=\"_blank\" rel=\"noopener\">red line<\/a>&#8221; warning to Russia are steps in the right direction. That said, there needs to be more transparency around which cyber actions will lead to which consequences. <\/p>\n<p>The sooner security leaders can embrace what is achievable, the better. We cannot stop breaches, but we can minimize disruption by continuing to expand and improve defensive capabilities. In cybersecurity, a good defense is more important than offensive capabilities. Cyber peace will not happen anytime soon, but cyber resilience will prove pivotal in helping nation-states gain the advantage over opponents.<\/p>\n<p>Read More <a href=\"https:\/\/www.darkreading.com\/analytics\/in-cyberwar-attribution-can-be-impossible---and-that-s-okay\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Instead of using a substantial proportion of resources to determine attribution, organizations should focus on defenses that will help them remediate an attack.Read More <a href=\"https:\/\/www.darkreading.com\/analytics\/in-cyberwar-attribution-can-be-impossible---and-that-s-okay\">HERE<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[151],"tags":[],"class_list":["post-43457","post","type-post","status-publish","format-standard","hentry","category-darkreading-ti"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>In Cyberwar, Attribution Can Be Impossible \u2014 and That&#039;s OK 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"In Cyberwar, Attribution Can Be Impossible \u2014 and That&#039;s OK 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2021-10-18T14:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt91ec549f660a94a9\/61674fff9d16c01cbc84a915\/Cyberwar.jpg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"In Cyberwar, Attribution Can Be Impossible \u2014 and That&#8217;s OK\",\"datePublished\":\"2021-10-18T14:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\\\/\"},\"wordCount\":714,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt91ec549f660a94a9\\\/61674fff9d16c01cbc84a915\\\/Cyberwar.jpg\",\"articleSection\":[\"DarkReading |TI\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\\\/\",\"name\":\"In Cyberwar, Attribution Can Be Impossible \u2014 and That's OK 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt91ec549f660a94a9\\\/61674fff9d16c01cbc84a915\\\/Cyberwar.jpg\",\"datePublished\":\"2021-10-18T14:00:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\\\/#primaryimage\",\"url\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt91ec549f660a94a9\\\/61674fff9d16c01cbc84a915\\\/Cyberwar.jpg\",\"contentUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt91ec549f660a94a9\\\/61674fff9d16c01cbc84a915\\\/Cyberwar.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"In Cyberwar, Attribution Can Be Impossible \u2014 and That&#8217;s OK\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"In Cyberwar, Attribution Can Be Impossible \u2014 and That's OK 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/","og_locale":"en_US","og_type":"article","og_title":"In Cyberwar, Attribution Can Be Impossible \u2014 and That's OK 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2021-10-18T14:00:00+00:00","og_image":[{"url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt91ec549f660a94a9\/61674fff9d16c01cbc84a915\/Cyberwar.jpg","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"In Cyberwar, Attribution Can Be Impossible \u2014 and That&#8217;s OK","datePublished":"2021-10-18T14:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/"},"wordCount":714,"commentCount":0,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt91ec549f660a94a9\/61674fff9d16c01cbc84a915\/Cyberwar.jpg","articleSection":["DarkReading |TI"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/","url":"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/","name":"In Cyberwar, Attribution Can Be Impossible \u2014 and That's OK 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt91ec549f660a94a9\/61674fff9d16c01cbc84a915\/Cyberwar.jpg","datePublished":"2021-10-18T14:00:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/#primaryimage","url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt91ec549f660a94a9\/61674fff9d16c01cbc84a915\/Cyberwar.jpg","contentUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt91ec549f660a94a9\/61674fff9d16c01cbc84a915\/Cyberwar.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/in-cyberwar-attribution-can-be-impossible-and-thats-ok\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"In Cyberwar, Attribution Can Be Impossible \u2014 and That&#8217;s OK"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/43457","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=43457"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/43457\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=43457"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=43457"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=43457"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}