76% of the year’s crypto theft value attributed to one state. On a public ledger, attribution is tractable in a way network telemetry never is.
A name concatenated from three crews. Attribution language implies a roster, and a coalition brand quietly breaks that implication.
An ideological name requires no capability and no conviction. It buys coverage, and it redirects attention toward a motive that may not exist.
A conviction is the highest-confidence attribution in this corpus — and it convicts a person, not a cluster, because the cluster is not an entity.