Comment by jstarfish

I don't put much stock in attribution, but keeping an eye on what attacks stop when an adversary ends up refocusing their attention due to scandal and/or war is a pretty reliable indicator in my experience (and very difficult to false-flag).

Activity we previously attributed to the Russians didn't flicker when Russia invaded Ukraine-- but did stop very quickly into Israel's invasion of Gaza.