Comment by ryanlol

Yes, technical analysis by leading security firms. Malware samples from compromised networks, strongly attributable phishing campaigns.