不是我唱反调，是你稍微搞过一点network security、APT forensic的都知道，cross-border attribution to named individuals is basically not feasible through pure technical means. 首先，像NSA TAO这种单位，做APT攻击从来都是clean setup。

multi-hop proxies, cloud VPS, Tor layers, encrypted traffic, obfuscated payload delivery，一层层隔离，基本不可能给你留下能trace回operator identity的direct path。

像文中提到…。